General

  • Target

    afdb9f9bf9939b071df9835e163a1714_JaffaCakes118

  • Size

    2.2MB

  • MD5

    afdb9f9bf9939b071df9835e163a1714

  • SHA1

    6dde89aea11eac2fd5619512ce0280ebd3f464e2

  • SHA256

    03189cdedb129a4351c84f52142cae07aaacf3f56e2ea927a9ade7c05f0ad450

  • SHA512

    c1664b0a304d3eb8e8f8eb8231961c40a4c9621d137514aba010d8cb355cfdbda28973f3f8f7437dbd9ceb23d4b2d77c97ceec056777be2ae7451ab4d9054663

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZj:0UzeyQMS4DqodCnoe+iitjWwwH

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • afdb9f9bf9939b071df9835e163a1714_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections