General

  • Target

    becddcedbcd9afc5e04fc94adcb85722_JaffaCakes118

  • Size

    2.2MB

  • MD5

    becddcedbcd9afc5e04fc94adcb85722

  • SHA1

    51d77f92b840bcd2959d31a30a3a737e569bff8e

  • SHA256

    9ca3645c59162971188b8e46d7931cef0b5962c209f325caa0c34e60460d8cab

  • SHA512

    b4cbd58a51f004ec45f35ffd2da203a80eab1048d22f5af94fd700194db9a5d5d030d98bd648a1c4de6392f38e5233bbc4974da57c44f4e4fafa6c333afbafc7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZJ:0UzeyQMS4DqodCnoe+iitjWwwF

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • becddcedbcd9afc5e04fc94adcb85722_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections