General

  • Target

    b2131de964416ccfed2b667a20fda672_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b2131de964416ccfed2b667a20fda672

  • SHA1

    fc4279b355f6501d4d0f265e0513c019aa88b93e

  • SHA256

    a3d5c3c1c7e73a38e8e06f7e78cb0d1494fe018ce18daa8bcf81c81370d416f2

  • SHA512

    c1b312b9d5d36d9669d9de35c849c84025b7fe81ec056390fb2217014efbc6bdac0547a777a921856827c048444f7d6aee1079f89d45efa396f00abe223663e3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZu:0UzeyQMS4DqodCnoe+iitjWwwa

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2131de964416ccfed2b667a20fda672_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections