General

  • Target

    c289919706fc10df043edd5b8aa880e3_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c289919706fc10df043edd5b8aa880e3

  • SHA1

    1eae5b8cc7d1f8ed234ece568707809d280bcdc4

  • SHA256

    fbc1d8ba5151a861207f90c6198d1b5126cc4059261943707f3b901357d20d33

  • SHA512

    1b6d13b05589826ecf11bc07b1a68b342dd4c97bfefe4a3d682cbe454a87025f53f31d00d1f3031f0967694dbf718d561433edb1be8b354627a6c3c45c07c2e8

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWww4

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c289919706fc10df043edd5b8aa880e3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections