General

  • Target

    2f3746f0a2893a2ae3be7d922461e20f_JaffaCakes118

  • Size

    2.6MB

  • MD5

    2f3746f0a2893a2ae3be7d922461e20f

  • SHA1

    a2e0437203e16dafc686c3b060f75a72b091cad7

  • SHA256

    b1d78706e0651073b892b9ef373f59412067cc6afec84f97e0a523d3244b016c

  • SHA512

    ff070cc8b7059366b3700da4704996edf77f689cdfb83221dd4926a95c9720c0f72fe7320e645c319bdb05b63f54c82c8ce508e7b58800fb86ee31c6768be959

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlw:86SIROiFJiwp0xlrlw

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f3746f0a2893a2ae3be7d922461e20f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections