General

  • Target

    c9122ba8752124eefdcf8568bb07f6fc_JaffaCakes118

  • Size

    2.6MB

  • MD5

    c9122ba8752124eefdcf8568bb07f6fc

  • SHA1

    c029ef032a35b6b5ba6d2fa5183d1f26a0c1ddd4

  • SHA256

    d5f2a142b697054672477931e284df262d4f9b81cef3b59f61eff3b0f0e76bfd

  • SHA512

    98bcdf0ce056c39aed4173c5b300cc14c23f93fba0e895e4de588e2a619b0ce49e9fb7021ffbaddcd6123c5058323fa1c5bebcdb365d90c290a9093c58b0a9bd

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlS:86SIROiFJiwp0xlrlS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c9122ba8752124eefdcf8568bb07f6fc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections