General

  • Target

    eb3cc51b605f3c759863902804984640_JaffaCakes118

  • Size

    2.2MB

  • MD5

    eb3cc51b605f3c759863902804984640

  • SHA1

    2ba771e1460c8c027fa665e290810bb2f099e6db

  • SHA256

    da56d680abc42f72b591f9b936e2d36c7481248e29a8661eb3c3681c564d2379

  • SHA512

    0351fae8dbfda085ba0cc4fc17df10ae05d6d0aa8dc4c73f2c29e19ad5624defb160b82e9226228e7c6f5e39d88f4d6b4dcb949370b278b87c45ca5ce98460ea

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZD:0UzeyQMS4DqodCnoe+iitjWwwP

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb3cc51b605f3c759863902804984640_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections