General

  • Target

    f14df290015f35312f81e4b567275774_JaffaCakes118

  • Size

    2.6MB

  • MD5

    f14df290015f35312f81e4b567275774

  • SHA1

    596ed2951bab4e46b95783a0f13ad6a4783b9f76

  • SHA256

    f902d12cb7ab4498591812004a85f753d81432561ba00f95f82b7743fb355cfd

  • SHA512

    0f5554397eadd1d072b196d20693b54d97ce582e62079f71e1deee1087ddf4edea991957ccbe65c1817c439706cdf5836cecddb0dcfc2c0ce02c33919b960e9b

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlh:86SIROiFJiwp0xlrlh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f14df290015f35312f81e4b567275774_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections