General

  • Target

    bf74783e5b5d837a30f9340db0f2efee_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bf74783e5b5d837a30f9340db0f2efee

  • SHA1

    3fb2282140c73b6c82c126e9f9221ea6f84def3f

  • SHA256

    996e1a79266f6ceb3dabfe42038ef9908a59128a17f1a3f6e349eb506aeff026

  • SHA512

    a91cfbb74b7c02e06905588f9cdeb40fc96cd8238e3847dd6d6b1b8dd52e1b2e080a548d604ff10e6acca77b052f2392e5fa34c15c993c6348a29921fcac845c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWww2

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bf74783e5b5d837a30f9340db0f2efee_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections