General

  • Target

    41d3e1a4f2eabc5c18714fe44d02a14e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    41d3e1a4f2eabc5c18714fe44d02a14e

  • SHA1

    b22305c2a495f8048d35b0e1261ab9d43171a9a1

  • SHA256

    46aa9fb3eb5a180c73df82b4577e8cde6b977798706d74e6ab183911eca062f5

  • SHA512

    511da617856c6a85186b831f3157f91ebdbfa3115656ceab19a9fdfe9489913fc291d3eb24966eed1fd9abf5deafa0d4a3426a89c30546ddbede376535cc45bc

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZR:0UzeyQMS4DqodCnoe+iitjWwwl

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41d3e1a4f2eabc5c18714fe44d02a14e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections