General

  • Target

    d915454f7f11f50794d4bef9ab68036f_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d915454f7f11f50794d4bef9ab68036f

  • SHA1

    2783c856b7e48eabadc6df7017b783f40c2b10c6

  • SHA256

    561f310296091c6386fcdd08f5202267d5178501eba2a0d574cba5f7c49bcfea

  • SHA512

    d136fdce4b953660feae5b1e9c5d2d0dfda62bcdef4e74be10bba41ec22705fb842e2e58a76967df4de81c2173cdbfb212e51391228bd818f169eb44e23b2bee

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlR:86SIROiFJiwp0xlrlR

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d915454f7f11f50794d4bef9ab68036f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections