General

  • Target

    4c02b26577c6cd8cbe28f387a4364e72_JaffaCakes118

  • Size

    2.2MB

  • MD5

    4c02b26577c6cd8cbe28f387a4364e72

  • SHA1

    8256ab02eac1fc4e6f97bdffe58d8bc945e66295

  • SHA256

    d8a0a2cfb8f2d04696edf1f021de08f1d11a02332d85daf8c05df5dc8c3e2b45

  • SHA512

    c77ce49579cd29de253a38b258f9c07c0a7514ed3579d8664cd8c9b343f0bca9565e5b3f436ac07378c106e1619c4ca0d3e310051f3ed7a2a6389c96190ba81c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWwwg

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c02b26577c6cd8cbe28f387a4364e72_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections