General

  • Target

    ebdb972f2af2a301901f1b25a3e38f1a_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ebdb972f2af2a301901f1b25a3e38f1a

  • SHA1

    533aac11de24943b65d669d253f7f758511700fe

  • SHA256

    99fe44b8b499651d127cd462455f163f1cca9537ccfda4519b1cd475572f7e1c

  • SHA512

    a726c86077cf8a48114fa28a4a7a295c8b04154fb2f99139f7a4029ef57a674b576592a1aa8391a1fd276a9f838223cd380623b9c004310100f9ac4fd1093cb2

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrls:86SIROiFJiwp0xlrls

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ebdb972f2af2a301901f1b25a3e38f1a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections