General

  • Target

    e23dcfd308ad53f161032eee204230af_JaffaCakes118

  • Size

    2.6MB

  • MD5

    e23dcfd308ad53f161032eee204230af

  • SHA1

    355035dfa04d6cba17b4f0de101b9a4e70a166f3

  • SHA256

    6ac909feb89def77afd2429e04c4972fa512104dc0e1d16fa08059c6d2c7e27e

  • SHA512

    e7d3036f308fe5914665768fc6167d1a06a24fe3b9d6862fe3d03e763cd4eb34fc47e07bd8a4e694895be73f22a16b8e29878b6412c4633dbe027a00dc5de7f1

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlY:86SIROiFJiwp0xlrlY

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e23dcfd308ad53f161032eee204230af_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections