General

  • Target

    4f327325d67df7ea9a4f2dad4d5e5fc6_JaffaCakes118

  • Size

    2.6MB

  • MD5

    4f327325d67df7ea9a4f2dad4d5e5fc6

  • SHA1

    a27fa8a31dcb8fa48d5f02a3322cd42f5f0eeb5d

  • SHA256

    138b964271520420e76834b5e3aea6df962ac877ace65b0291fe8ca246b84caf

  • SHA512

    a50f20bc00be942e0b2952dabbfb20d174850b66e20c6e4ee3398c1c3e6bec0d86e0695435dab409ba1898b1be9234797e7c91824d9ffc3d9fc665e62f4dc7e2

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrle:86SIROiFJiwp0xlrle

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f327325d67df7ea9a4f2dad4d5e5fc6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections