General

  • Target

    9379934f26552f2a62b0a8914cd56f03_JaffaCakes118

  • Size

    2.6MB

  • MD5

    9379934f26552f2a62b0a8914cd56f03

  • SHA1

    7becd579b19e09f3edf873e9ecf20ab3fbf8e43c

  • SHA256

    225716b0607fdb8c118a1634fcc1b495345ad780d03e8fae1e0c1c0b0a390b12

  • SHA512

    08c0bd1a33efad522a3d5c46bfa8da17f4f8206707b478caa31eab13b86c2bd343b0aeeb1907abc79d960e10104a6f8623277249edd141c8b500ba9a45ecb0e4

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlR:86SIROiFJiwp0xlrlR

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9379934f26552f2a62b0a8914cd56f03_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections