General

  • Target

    c1f3743d6504d3816e5d10403725f5a4_JaffaCakes118

  • Size

    2.6MB

  • MD5

    c1f3743d6504d3816e5d10403725f5a4

  • SHA1

    dc70f1d5185ab345340b04c1ae9990c62c57ac17

  • SHA256

    62cde86b136954a36ea3f0a416b07f1005dd7427fc48cc89eaf7a0b11f7ab281

  • SHA512

    0b9a571cc4345b263ee6d3c683c4e62d515e564065921ac8e2adb451ae2e80247cf6ec931fe7c2e3696377336f4fc07e748ee349760f9459e9d52cd5779dd9c9

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrln:86SIROiFJiwp0xlrln

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1f3743d6504d3816e5d10403725f5a4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections