General

  • Target

    0c1bf7da885ae9977e0b787af876063d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0c1bf7da885ae9977e0b787af876063d

  • SHA1

    9b4e83737103f52ab1acdb2c7507154a2b63876d

  • SHA256

    56447a5255c8a26839dd0e704f38d69c8fc35d184c1ceb590e5a08d89067774d

  • SHA512

    25952f14deae73bd69dab222fabb6b3dc9fc19f432be626c427014ade3b89d1fcc3a8bcc153037df9599929e479b1ee656c07ccca20f84226d0bf130e32f4eaa

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZd:0UzeyQMS4DqodCnoe+iitjWwwp

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c1bf7da885ae9977e0b787af876063d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections