General

  • Target

    c1efdb82acb7c25002c9e121c045a37f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c1efdb82acb7c25002c9e121c045a37f

  • SHA1

    d611b61863bf2d4f5455805fdd6882a877a796f8

  • SHA256

    50281c15789c1804b72932ce82decce7f009faedcbdf6365b1ed72cd9ef714ef

  • SHA512

    b5120c035bae986dfc6dd08b267a75f9fb753f90861c403c672b41aa534b8012738e6a354d63d97d6defab2253b308d833e218ab10c1c78806c837546aa5e914

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZh:0UzeyQMS4DqodCnoe+iitjWwwN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1efdb82acb7c25002c9e121c045a37f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections