General

  • Target

    ad285bc7819ebc5b9cd2250e1dfbdeb5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ad285bc7819ebc5b9cd2250e1dfbdeb5

  • SHA1

    5100e6cb699991340b3fc9286f941b61c4e33dd4

  • SHA256

    4762ccc5d5d10ebe2b8620faf0ecda8debd9c3c82947ed4d76c2e0889405fd05

  • SHA512

    b4e96c4e0455d4a0e3dda9a9ca71864b679ea9046e2f88cef2d79c4920b94e1a7501aeca02cbeb18d21ee0d7b12c760317440ed9940f8912d992cf9734700183

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlK:86SIROiFJiwp0xlrlK

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad285bc7819ebc5b9cd2250e1dfbdeb5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections