General

  • Target

    b5cc63dbd2ddca5c713cb8894431fd47_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b5cc63dbd2ddca5c713cb8894431fd47

  • SHA1

    d666e9209baa217b4f581393a1094c489cdf197a

  • SHA256

    35fea04f7337e11ff56be6693bd54e3b02b089b15cef4ddaa9a5cf5843a4a59f

  • SHA512

    42481ae59b0ad8e71e0d30384bed564e186a692fc93242de9ee25a7490e46d67247f790b85ef669dd3c2c3fb517078f37bcb4259cc4ff016a0001ac89aa8a683

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlt:86SIROiFJiwp0xlrlt

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5cc63dbd2ddca5c713cb8894431fd47_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections