General

  • Target

    ca237b9747f49c8df0c44d1a0863952b_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ca237b9747f49c8df0c44d1a0863952b

  • SHA1

    ebe754f7a78f21465b92d7ea0ca358c18c0e6500

  • SHA256

    bd322a9b654929fb494e4bfba865fdcc54663e72bbd64f6d65d3eda839c3905a

  • SHA512

    bf9b28468690250fdb88fcc52707a12ce2e68a4b08c2e319ff5e8908e613097badb2f74dcbc36d55dfae68d6b98f88ae3e0de53b6420518cc4f8b2bbd7c683f4

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWwwm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca237b9747f49c8df0c44d1a0863952b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections