General

  • Target

    d86ce7dfc13e70ae13db9d36157f1b3f_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d86ce7dfc13e70ae13db9d36157f1b3f

  • SHA1

    cbafa0509ae0bd4720dab19e77845327b68c7a38

  • SHA256

    eb7a0fda63d28a19af9c6f6588ba56893893d662eabb8e534736688042232ba9

  • SHA512

    c06e623e2c7ac0a54902d44c5a4de9e4023cf149babe045a49288489c754a88127b4914f49724a8369696d76a483b4a0f44fbf1e057813064a6ee03b53259a6f

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrln:86SIROiFJiwp0xlrln

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d86ce7dfc13e70ae13db9d36157f1b3f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections