General

  • Target

    c0fe2b3d77caf0814e59fe35830b3958_JaffaCakes118

  • Size

    2.6MB

  • MD5

    c0fe2b3d77caf0814e59fe35830b3958

  • SHA1

    c394657ebfcc095aa104d9a309e8cc9b7d170c71

  • SHA256

    c228ba002b157305af45a2946327a9d8964b8aca4ec7f3f50f30fc6dfb1fb81a

  • SHA512

    2b171783dfaa4a98133d1f0906cc03384adb3ed316eb7fa06e66179aa6ef798ac336bb664a0090e546bfc389552903c85f44604fd499c23b89f28c558d59a9dd

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlm:86SIROiFJiwp0xlrlm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0fe2b3d77caf0814e59fe35830b3958_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections