General

  • Target

    e98bc8c5c877574b661839da0c28e7dc_JaffaCakes118

  • Size

    2.6MB

  • MD5

    e98bc8c5c877574b661839da0c28e7dc

  • SHA1

    c60a8ccc71b7d9861a59f7fa2d49f85aaffb102f

  • SHA256

    6058a5c93015f2119dd159008fa32e2b117a4f5ad5eb54e20c4a62ee17b84fd5

  • SHA512

    c90b109c4d7fd20ef30795bfa1e7df52825854ab1d7b3568ab2558e0dc2a432a4f5b152fb4f248f490980ccd401c40db6939eb489a1ddcfd131e41422993f4d3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlS:86SIROiFJiwp0xlrlS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e98bc8c5c877574b661839da0c28e7dc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections