General

  • Target

    d76b1ff09c96e72a2ad6dcdc37814d03_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d76b1ff09c96e72a2ad6dcdc37814d03

  • SHA1

    9ab4348f9b081f83c350370748d6417363bab20f

  • SHA256

    3fa278a51d334c7ce70a3530b564feab0bc52bc8cbb6ba08494d67b6a912982a

  • SHA512

    e5de58a7824a60b810cb7593f6776d59e3950d77e756c44f8fcda2dc5e725cb7748b3a5eab566be6ab60053769074c09353cc2393d187b85ffed70b121dd4fab

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlw:86SIROiFJiwp0xlrlw

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d76b1ff09c96e72a2ad6dcdc37814d03_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections