General

  • Target

    d2151fbedd9215d40a8cbe773407c82b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d2151fbedd9215d40a8cbe773407c82b

  • SHA1

    2f4af89cfd9a4bdf4d18266239e2d193358593ad

  • SHA256

    73e6517f52aeda885b30d2b6a30978ac33d3d7b4cf89473074743ca1d9740c75

  • SHA512

    6b336542e90c6addfc2eb3404c9294e4bf12a8ac4117745582343e555787213446b8ce1b7cf84250ccd6e58e7817535a2b315943c4ce6008b0a60b34cd53e1e5

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrli:86SIROiFJiwp0xlrli

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2151fbedd9215d40a8cbe773407c82b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections