General

  • Target

    31d91016f943b6301a8cb36e7cc02411_JaffaCakes118

  • Size

    100KB

  • MD5

    31d91016f943b6301a8cb36e7cc02411

  • SHA1

    7e8dfc1eb8b303eb8c150801065d0212b8e877e0

  • SHA256

    fe67481f4a4b243c5d37dd67c4dedb4960df0e6ae8c4cd8651c08fc8af03f6ec

  • SHA512

    c9a3e81035b4ac5478e715863eacbc57de784afde3710a7a86f883d451bcacf1db37440b527e64221395a3919bd1e5b403c821984f477400c643f4826a1175e6

  • SSDEEP

    1536:PnSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEiwSOj5JPkzmtuIzv:/SnMuGc/CfZDap6COU45EJLvtuIL

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://dannyakuffowiseword.org/extra/stockers/gate.php

Attributes
  • payload_url

    http://dannyakuffowiseword.org/extra/stockers/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 31d91016f943b6301a8cb36e7cc02411_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections