General

  • Target

    e90eb4637fe23f27d8ee96b5422c40d3_JaffaCakes118

  • Size

    2.6MB

  • MD5

    e90eb4637fe23f27d8ee96b5422c40d3

  • SHA1

    67af0fcdb69d5a03ae35d61a96d5939d3e19d962

  • SHA256

    4482d42f3ecc0dec0b70fb5d31be999d6fea993db4abb51d40ed4c781cca4072

  • SHA512

    34e5ff23fabf1c858f70a9ef4b9a9603d77b8f3ab222c80f3cf9b6c124a4407a9e1b86867a84867c92bd624b86bcc66492a9e20e06718fd084c8e5b13ee30ff8

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl3:86SIROiFJiwp0xlrl3

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e90eb4637fe23f27d8ee96b5422c40d3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections