General

  • Target

    a04498735558e80b8704ddf4095d95cb_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a04498735558e80b8704ddf4095d95cb

  • SHA1

    ffd89b89fe5a8ff988efcbfade94136a7baf2c26

  • SHA256

    dd77d2baeb3d5616bb266ec91e7bcb743e2d69d2852d5aa45a18eff4802b2534

  • SHA512

    661d06fe6a537919fabc9a52f21dd0c094e9b1bd25d59a004a0c339bea4dd409804a82f3410662f97633076481aab73d641eea439503bcd0bd0ec3eb7d678588

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZI:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a04498735558e80b8704ddf4095d95cb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections