General

  • Target

    ebc06baf5350b51101987ce9185e7d64_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ebc06baf5350b51101987ce9185e7d64

  • SHA1

    77b424834a1fb260e0ca9e9cc0e16afa57d674ce

  • SHA256

    a80a712b06cdcee855db7ef3c6f6ca47245591357f8464e26c4f2e3ce9ae3916

  • SHA512

    7c921b569eadae08492ee125fc3bd5ed4c8e6bebf0bce7eab2d4f136a956b440ac22839e897aade4975126ec646e498d068bb66fa9651d9e648fd024f78d9709

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZO:0UzeyQMS4DqodCnoe+iitjWwwK

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ebc06baf5350b51101987ce9185e7d64_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections