General

  • Target

    cd4b30a91cab4fa43a5b7dfdc3c4f558_JaffaCakes118

  • Size

    2.2MB

  • MD5

    cd4b30a91cab4fa43a5b7dfdc3c4f558

  • SHA1

    9939243920aabad248274a7ce939307c5afa6b72

  • SHA256

    ef2ef2e50c757985e8d1d55cf520f7c2ea950374c0456715e8ca74b18e57c7b1

  • SHA512

    8b0e5397b6ce252c27158d9887d0b249a3e9b40a32f7323537e1ecd4d714bbbfe919c5248f27c5da574288d7b08c3c950e79e4cf941f94c71ab39b4f92daca20

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZV:0UzeyQMS4DqodCnoe+iitjWwwx

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cd4b30a91cab4fa43a5b7dfdc3c4f558_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections