General

  • Target

    6e3d6322d0eec859e42cc41a363ade58_JaffaCakes118

  • Size

    168KB

  • MD5

    6e3d6322d0eec859e42cc41a363ade58

  • SHA1

    ae254028379fafecdb755ba05888531e1b3e4a2a

  • SHA256

    d6f5fbac059e95cc24974fc202e48680c8578cb2ec5879353a6eedb0c92b42dc

  • SHA512

    513a8a6983c231c03c0174f9decb561f7a2fb690741fa2eef011d03f050436a6342ceef0cc00b9857e2816a2f6e77c59db7bdfdc0b7eadb49e0e73bc61be9864

  • SSDEEP

    3072:nSSuxqbb9+4fNoOvjGct/Iu2lQBV+UdE+rECWp7hKB7yLtk:nSS+qbb9iOvjl/IUBV+UdvrEFp7hKBWO

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://199.192.25.237/~catchusnot/panel/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e3d6322d0eec859e42cc41a363ade58_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    6112ac1abcf5fa0d96ec0b4b96090842


    Headers

    Imports

    Sections