General

  • Target

    b86dca29985f2c3f1ce3fa84ba9dc963_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b86dca29985f2c3f1ce3fa84ba9dc963

  • SHA1

    4f4e6825920f27b43d209b04cd6e7df47c4c9dec

  • SHA256

    3b039d1c735f470fe97283fadf60a73f2be62c7b43231d01df7db8d1fcdbdf8a

  • SHA512

    adadb5ee0f89d54468ad2d6eed53a5456c0626bc1e4e721e487bbe81a10bc0c297347316ca56f30fc9c0f7e565244881f3172f3109758d0cf11eea00fa353102

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZO:0UzeyQMS4DqodCnoe+iitjWwwK

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b86dca29985f2c3f1ce3fa84ba9dc963_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections