General

  • Target

    0bde26e9f5b0bccd5ebab2bf0c2239e6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0bde26e9f5b0bccd5ebab2bf0c2239e6

  • SHA1

    abafab11279b01c7990a716bc33b640de3aa75e0

  • SHA256

    efd896bcb855c05dd05ad4ca65ec430b581a1b0820aa879e8b56d60d1457de22

  • SHA512

    9c9bd2a185047de0a81473160fbc8ee073679bd796060e0581363a49b69033018559f19eb9b0a8bb01d68baab65f6c8ed299860c01393e31816c47acf18becb6

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZD:0UzeyQMS4DqodCnoe+iitjWww3

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bde26e9f5b0bccd5ebab2bf0c2239e6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections