General

  • Target

    0ecea7730da3e73237d1bb463015c1d5_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0ecea7730da3e73237d1bb463015c1d5

  • SHA1

    85a7d2a1f4032f12022779a544e0116a25400610

  • SHA256

    e2f28ceee65d979501df90c06ca84e9d735302ec9a034cd5dbc9068c2112b1c5

  • SHA512

    5dd67ad6d6f7f444be8ef18db911e3e568d21f2515b79a9860f3da0d76de29e2b5ed739bea672d23e8fbef29f945eedddb6c50a176cccfec8f240a93c41e9106

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZs:0UzeyQMS4DqodCnoe+iitjWwww

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ecea7730da3e73237d1bb463015c1d5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections