General

  • Target

    c27f5446bfe4c75f2c5ec83ae800bc08_JaffaCakes118

  • Size

    2.6MB

  • MD5

    c27f5446bfe4c75f2c5ec83ae800bc08

  • SHA1

    11bf9a3906271eb9f9b62f7b177d0c52a31f78d0

  • SHA256

    b91c468f540aa58c7d6bfecda20e9f8b3ec686147c6c56e7fb6018ecf3072c9c

  • SHA512

    cb82180f8aeea6cc42155bb16e2765077bdcb68855a32c76383ff3095779793bec3ce3fc93daf67ce6648979d94a1c2194aa44f9ffd3f48dae1c7bd930f446db

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrld:86SIROiFJiwp0xlrld

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c27f5446bfe4c75f2c5ec83ae800bc08_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections