General

  • Target

    ce1fe58af9f495e0ad42356a7e99a670_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ce1fe58af9f495e0ad42356a7e99a670

  • SHA1

    aa6facbe571cff12af4be3823526b41a318b0e46

  • SHA256

    28c9ba365e51d8a0927fe183b3c82ce63669030777de1db64b66a0948a1770f7

  • SHA512

    6cd5536c7c50f9efd97a150064b69fb695fcccef17c65e9762f9a8a1bf2b3b0e08f7ccb2d1d11d24dd98627bda82ddf9d4e55cd6c3bad3243d0855ef4db3bee1

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZc:0UzeyQMS4DqodCnoe+iitjWwwI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ce1fe58af9f495e0ad42356a7e99a670_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections