General

  • Target

    dfb5fdbe868d891739dc7c96c56df79e_JaffaCakes118

  • Size

    2.6MB

  • MD5

    dfb5fdbe868d891739dc7c96c56df79e

  • SHA1

    5e69d809a504360fc5bc821ed5b320503e31bd5f

  • SHA256

    1d3bf9744caa8d55dcb53de6df869093e3f47eabfd16af557a62634b8b52aac0

  • SHA512

    1332ce2a4e5b3dd492a869820b7eb9b86ce38ad9edec734477e235d56c5c97d147b6060658d717a1421c824c7e330fe199487ad0a615335b54171b210e0d7c07

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrly:86SIROiFJiwp0xlrly

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dfb5fdbe868d891739dc7c96c56df79e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections