General

  • Target

    945dbdcbc42835d7f59a830f4c385fae_JaffaCakes118

  • Size

    2.2MB

  • MD5

    945dbdcbc42835d7f59a830f4c385fae

  • SHA1

    ef99594f118a391da7fcf3b0f22d9e72815d52a7

  • SHA256

    8f3630be79a92d7e6c1a4748af8f9aea6e4782ac6c36c3dee647958bf2cb0742

  • SHA512

    5a6c99e4bb6cee64eca7bded2a3612aaf64f0e5cf64fb9e88c83dd409e90bd8e95ba2af6be2ef0843376b4a482c576645cbf984a7fde3cc8206e8ea4d4894831

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZt:0UzeyQMS4DqodCnoe+iitjWwwJ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 945dbdcbc42835d7f59a830f4c385fae_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections