General

  • Target

    b807911b1344e5e4e09595c29568d341_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b807911b1344e5e4e09595c29568d341

  • SHA1

    2fb31e7616136bfe052f8bd84fad458dc953bd16

  • SHA256

    d1b825aa175c67743ac6dbd186619832aa2b7bbc3330b72d154a7f63ff0b4fc1

  • SHA512

    9c987f6791e18f658603d2126d87c14e141696c8ad83fcf44b8d7fb4b6431e4efbb3a6ceca7406bb81353a38fcc44263b2a3ff647e2bda710161f99423892329

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ0:0UzeyQMS4DqodCnoe+iitjWwww

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b807911b1344e5e4e09595c29568d341_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections