General

  • Target

    b03218e299478a265a31d24ba29c81fe_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b03218e299478a265a31d24ba29c81fe

  • SHA1

    a48791b7c16eb9b73fdde78cc14e60d9be821558

  • SHA256

    280ea981b7d7442ff243a7edef6f0b396392c80b1290543336b6a5a475fdb8d1

  • SHA512

    7d6a1e14d155a6a84013eff7ccf1cf2eafc897a2c87905614eb4b78dcf02ef6e24e2913cf8abe1c09dee3f200571d8cef8b6a3f4f0bab7de28ffaf021083c8d3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZH:0UzeyQMS4DqodCnoe+iitjWwwz

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b03218e299478a265a31d24ba29c81fe_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections