General

  • Target

    c0da7caf2b06c98e37b43a56380b95d6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c0da7caf2b06c98e37b43a56380b95d6

  • SHA1

    802d8523b9b2613ec5e2be7a097463fd818032d3

  • SHA256

    3b621d5c526ef67bf9e9d327f97427cb9a17215b382ee8c6c9476452e5a0ff89

  • SHA512

    676c3d2675964b05992b4805945430ce7b392f3551b2e78d9b68a8e1007afc41e2bb73799831c4341bcef1994751036b88d3999f400294bec941daa358ed4836

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZw:0UzeyQMS4DqodCnoe+iitjWww0

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0da7caf2b06c98e37b43a56380b95d6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections