General

  • Target

    b773ef23b9d2cf3341d05bd028442aa3_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b773ef23b9d2cf3341d05bd028442aa3

  • SHA1

    2eb62791bea0518087e472cab20e4826d1075c5b

  • SHA256

    96282538759c7e3caf8bea0a8ce5fca1500718bb489c121e9860a603b38bb4f8

  • SHA512

    d0fd206184f6fcad25ed12108af0f4dea00bbfde2194f53024e3a9c357c41a0e473a2f9c7a1abaaba17700fe2029d5b57ea1f9b99816d36f181117479f36b2dc

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlB:86SIROiFJiwp0xlrlB

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b773ef23b9d2cf3341d05bd028442aa3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections