General

  • Target

    bff875c21d81ef6f7052c9449fd50713_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bff875c21d81ef6f7052c9449fd50713

  • SHA1

    9771358213464d24bcd8330f820d10539fa35005

  • SHA256

    18f435eca654ac271824f60c91f4780db8887877b197554b0d26c506701f625c

  • SHA512

    4f8512f14b918e4fa6bc34ce739ad69c687935751cf672d8a2d522599b01434c83de94dd18e5416e5fbf5e412b6c30d96cd59187042c1f882f99ab1683a7170a

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWwwO

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bff875c21d81ef6f7052c9449fd50713_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections