General

  • Target

    e1d38fe4d41457fdfffcb92d71daec03_JaffaCakes118

  • Size

    2.6MB

  • MD5

    e1d38fe4d41457fdfffcb92d71daec03

  • SHA1

    3833bb953eb9727320608622df78e4cd68ff7625

  • SHA256

    178401de38a8166453cc760e6a888d1782c3f31dd14476b45d735c740c50f7b0

  • SHA512

    ca9cc821301aa9d0b433f80104bce3971fe18e2bfd52c46d58366468d2fd84b56fd4c76072a773e971ed154eff1abb04943df80133c8541c2a7b7e022efd2c26

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl9:86SIROiFJiwp0xlrl9

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1d38fe4d41457fdfffcb92d71daec03_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections