General

  • Target

    c1ff55fda22b6b1cdb5dce531dc5143e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c1ff55fda22b6b1cdb5dce531dc5143e

  • SHA1

    0d88de286f2bb7eaceed474faf0d98a997dc27dd

  • SHA256

    b725391917be7f3b5c8c75ee5b4d2482c7fa74f6586c51eb5773b4abdc1cc0b0

  • SHA512

    855b3db7085373665503a0225acc495b5f9d57d73a9bbe4a94cc121b42eb2cae68707181dd2260a122c81a76da169cdfa64fcf2cd0da5847a92a5bc9bf0f96bd

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZj:0UzeyQMS4DqodCnoe+iitjWwwv

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1ff55fda22b6b1cdb5dce531dc5143e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections