General

  • Target

    6f0247bae5f3fc2b6ec644ef5a5a2907_JaffaCakes118

  • Size

    2.2MB

  • MD5

    6f0247bae5f3fc2b6ec644ef5a5a2907

  • SHA1

    c6e2cc6e2aa0560848c7a476a866dd25161cae2a

  • SHA256

    995a09cb8c096619aa04052f24b33f5af652fc17324ebbae31b9e914d4c0d6cf

  • SHA512

    14dbe2f2a5e9aac2f353b211ab05fcb032b701a5d4c90c72d06b2555045c9fb6ec51e1942b2c5bb2be32af561a046f430662b0f349d3f56673285730e8eaa5f8

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZG:0UzeyQMS4DqodCnoe+iitjWwwy

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f0247bae5f3fc2b6ec644ef5a5a2907_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections