General

  • Target

    ab08dacf91986286bc2d0ea60442542d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ab08dacf91986286bc2d0ea60442542d

  • SHA1

    1608427e93e6e9c37aad3d1e35c5901334c53e05

  • SHA256

    eb894eebe1d9b52cc84902221b495b05910901f97ea797ca6f0165c6fb086414

  • SHA512

    63a1d42c2afbe5d9760d6d98b4057d2acc12e585f03418e0b985740936e9192e6b84db257ac2bb71239b7259d3d2ca4e00c7e91b0aa1f4104e66fe666ca1ddb0

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl0:86SIROiFJiwp0xlrl0

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab08dacf91986286bc2d0ea60442542d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections