General

  • Target

    a27072cea9fed5d405678b948ef69d59_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a27072cea9fed5d405678b948ef69d59

  • SHA1

    0a3e05c15e033afd61a33ff019fe0f6613431266

  • SHA256

    9f08a1ef8f37a41586ab3fd0491e6005dbc2be82d83d484ca9e6cea3f772df60

  • SHA512

    9ab7309a8e4f4056201d594967372c01de2201e50613dde1a9901a44e033503424cc81dc0b0d5bc01e3670b2db2217ddd2b8b90b9081de0f65732e593a68b060

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ6:0UzeyQMS4DqodCnoe+iitjWwwe

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a27072cea9fed5d405678b948ef69d59_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections