General

  • Target

    c7daf8bcb30ced988df995272f0f1215_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c7daf8bcb30ced988df995272f0f1215

  • SHA1

    8374b4fec2302f3c7c0e9bb14e5b939a54e8d744

  • SHA256

    a6269bb7dd712b3ace90a32e4395cac775d26e20759e381cb9446d64de54cccb

  • SHA512

    3236d0dd3540bbd3c253cd0e0d3951ee965a9d8e29a9cbc9808a9af4052117c810984f75f6a1515f933b6f3b6e5a192f35e73d70cb08bf3d6c5506eb54694b84

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWwwO

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7daf8bcb30ced988df995272f0f1215_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections