General

  • Target

    acbbfcf5d4f473fd518d523cf8e24f69_JaffaCakes118

  • Size

    2.6MB

  • MD5

    acbbfcf5d4f473fd518d523cf8e24f69

  • SHA1

    df4c60228c2956b76f5cf752020324e17c82d3e3

  • SHA256

    53c96ce3b510f494e78d5e37311ab34e9913a29c16fb7fc707f4ebabc50d62a9

  • SHA512

    a4b49094168c8e9ddcf4af6805a1d5282b412532e95050513ff68e15cee9c38d98cc79ba95316d3ec2a00c8d2df2127ff63dac215dfb87a576aaac5cabc6ea33

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrls:86SIROiFJiwp0xlrls

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acbbfcf5d4f473fd518d523cf8e24f69_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections