General

  • Target

    d99b07ad4c407ee70cde7dbe353dbc34_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d99b07ad4c407ee70cde7dbe353dbc34

  • SHA1

    8ca0f2eaabc7f2a4e761a5df027ab7a148c457ef

  • SHA256

    037ef1cc2e20d9b71ddb6892f43a46e3d6e41db433e869b5c0b563f677976d80

  • SHA512

    49824ccdd7eba8d6f177ad64f07c85b6eef63e6ef25b03bc2db26d04690e4e67fd395a1954ec0f843c010048fa616beb06a51fbe28035a3ff97f0edd6b121fbc

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl1:86SIROiFJiwp0xlrl1

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d99b07ad4c407ee70cde7dbe353dbc34_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections