General

  • Target

    5f3552ea6cc8e779fb31cbd7428ed4b6_JaffaCakes118

  • Size

    2.6MB

  • MD5

    5f3552ea6cc8e779fb31cbd7428ed4b6

  • SHA1

    8d7ff3c916807b5aacab475daf3d47f381a8f4ab

  • SHA256

    eeacdcf7d0f0161074acd33cc45ed2089632142081b5adc521ce5e7eb909fbb7

  • SHA512

    2f11f5c34ccbcb44ebac77887344efcdd88364614f153c616924b01ca951a714a2dec07e6043a5902958be37f8134b83917d78b36d9541bde8bbde907eb7480e

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlN:86SIROiFJiwp0xlrlN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f3552ea6cc8e779fb31cbd7428ed4b6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections