General

  • Target

    2b03d5db24b91d87738db6cf49d28b16_JaffaCakes118

  • Size

    2.6MB

  • MD5

    2b03d5db24b91d87738db6cf49d28b16

  • SHA1

    353d82abcd92c17b99a522d26b97cb7214394c9b

  • SHA256

    b0381eb8f98917c0a2e5b1894ee324610713316db9923063124e229528117cce

  • SHA512

    6c9b1a1050825be91f214c696b2e4db2d711c901a5518fcde24170ed34558e940eb6a15cb12ea8db6e8e17b632c8aca27afe6b9f0e544fb66a818d6f7c4ba0d6

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlo:86SIROiFJiwp0xlrlo

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b03d5db24b91d87738db6cf49d28b16_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections