General

  • Target

    932d7e09cabb5d8a8703efb75fc5e576_JaffaCakes118

  • Size

    2.2MB

  • MD5

    932d7e09cabb5d8a8703efb75fc5e576

  • SHA1

    e891f9641df3e362c606e71356f1f7ba5a17b969

  • SHA256

    28bf84aba08a3a2f1b04ff10569964694db9cd8f50d7e648ee5f8c42ce103da5

  • SHA512

    2f587320caa80e97150226068496f864a6612091eaadde90184aa593feb6388d9d261d77aa4d2249814e79f3e7388baa1d32baa69161703f9c587d4278ba922f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZp:0UzeyQMS4DqodCnoe+iitjWww1

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 932d7e09cabb5d8a8703efb75fc5e576_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections