General

  • Target

    0035b70154f2e1df4c3cda8e8fb24b8f_JaffaCakes118

  • Size

    2.6MB

  • MD5

    0035b70154f2e1df4c3cda8e8fb24b8f

  • SHA1

    16cc481a1fb6f88cb014474876e0854836619307

  • SHA256

    a19dff42e4fada2ded22aed776b1a2742413e04faeee76c171d3ee6ef63ad787

  • SHA512

    a0c8d9f3cf18a61025364adffd6f15d3e64588e4b3a768597ca237fddc44c94ce08176f4394d5a240ff3a07526a9fdd8282e2d1e2d2d4a3e3432645801634b2e

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlM:86SIROiFJiwp0xlrlM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0035b70154f2e1df4c3cda8e8fb24b8f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections