General

  • Target

    0615ca71184bf618d4bbec762102b310_JaffaCakes118

  • Size

    41KB

  • MD5

    0615ca71184bf618d4bbec762102b310

  • SHA1

    3b5c21f916ef25227282ff12454989fe5fe1043c

  • SHA256

    3d4da5d6f0caad10fbd8cbf08dcd20fa7246f948ab02bbc26b840452e1117bb4

  • SHA512

    28718087b81716421eda7850ede9d6a110b53f356da643ad13355af8ddb11c6f6095de777532c35e72d34844f8f8a0146fcb1c9ed4759fdd85e96ccde728220d

  • SSDEEP

    768:/KxRf2Nohyrff9IUzF/CNqaVIAV2FjGRTDNwJxE:/K3fio0FFZCNT2c22ge

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://genic-enterprises.website/www/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0615ca71184bf618d4bbec762102b310_JaffaCakes118
    .zip
  • Pony.exe
    .exe windows:4 windows x86 arch:x86

    fbab3e022f0aa68f4af07dff0d4cfb9f


    Headers

    Imports

    Sections