General

  • Target

    01abfb538a6f187ccbc0fcd41b73bbcf_JaffaCakes118

  • Size

    2.6MB

  • MD5

    01abfb538a6f187ccbc0fcd41b73bbcf

  • SHA1

    e454cbd5ece25533ffa0434d4a8ba56039df53e2

  • SHA256

    901d8f36d56c2c87a775d9ccd8e0cd77748c3264213d159353fcf00bc0696c1a

  • SHA512

    e77295962f35470fa42e254b7550f2930bd340744b0f69156dbee641f80214bfb003eda9969edf0d5027ee75dcc0d1d2d92106cdd1bd59cf9700877393c02310

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrla:86SIROiFJiwp0xlrla

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 01abfb538a6f187ccbc0fcd41b73bbcf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections