General

  • Target

    ea0dbfbcda85d0f69c2ceecd740d8305_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ea0dbfbcda85d0f69c2ceecd740d8305

  • SHA1

    315d5144e06d64f1124c865932d87805aac46326

  • SHA256

    51a0c5b5fe428f8e467a26403dd0462fd513fdd4e5702468d98d6a70a6b7217c

  • SHA512

    97f94b1326cdd101f0562add891a3cbff0a679f2d267958a0075d5e41306f558b2eea231e732531d88107218d0715ccd84f0e462a323af5018577eff202bd7bf

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlb:86SIROiFJiwp0xlrlb

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ea0dbfbcda85d0f69c2ceecd740d8305_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections