General

  • Target

    2d0062f9cc12c7057d07d3b342aeaaf9_JaffaCakes118

  • Size

    2.6MB

  • MD5

    2d0062f9cc12c7057d07d3b342aeaaf9

  • SHA1

    b1708b58d312521a8c1da1dfd078b3e9d5e66d95

  • SHA256

    00bfe46cd59f3b28ddea13796aff3a2aafffc2f2c989b2c8d4885b503500b51b

  • SHA512

    af0547583b14724b35692dc598e0b9bf15ad331070446de1896aa85df41d7a216b189d8b08e7aa17c700daf6645100850d9f4fbf59cccd0607ea8adcfee61721

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlH:86SIROiFJiwp0xlrlH

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d0062f9cc12c7057d07d3b342aeaaf9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections