General

  • Target

    beada1c2cfb3a9e47c50d678aa58e557_JaffaCakes118

  • Size

    2.2MB

  • MD5

    beada1c2cfb3a9e47c50d678aa58e557

  • SHA1

    ac5c2418f883ce3565185ccb2c9562091b2434b6

  • SHA256

    c96751f9e8734e5cf5e61b4defda66aed32e4454fba6557ef18c4b9fed9cf6c3

  • SHA512

    ff4ae3694fa3d5306b661118da8c5fa3481af7d2b7a2f907c8953ff5e6cf6d2efd453f42bc23403c1efe478325abedf514b45fa8cc213aa517ba66a52e5320d9

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZy:0UzeyQMS4DqodCnoe+iitjWwwm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • beada1c2cfb3a9e47c50d678aa58e557_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections