General

  • Target

    bdba2fdac08972de6b43d491059bf326_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bdba2fdac08972de6b43d491059bf326

  • SHA1

    7f17579ef6a52d4d2caed7ef8957ded03fd2d726

  • SHA256

    07e0f9da4e23531f8a8737dfb64aa46b67c4bc8c3bbd931a0f3afabeabbed2c9

  • SHA512

    e44cfa0770b2ccd75047e2f06bc051fd3af81812080e95ebebe91d691bbde522cf311fb0edec5a8fe46d7d4aa90db902784576f4ed41a746f22d7093c3307f06

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZx:0UzeyQMS4DqodCnoe+iitjWwwl

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bdba2fdac08972de6b43d491059bf326_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections