General

  • Target

    66970f974aa3e74d3da3f250dae8cc8bJaffaCakes118

  • Size

    100KB

  • MD5

    66970f974aa3e74d3da3f250dae8cc8b

  • SHA1

    c2e1825a53324c14af4ca34fd98c788c2ccfb89a

  • SHA256

    1abebdd3c5acfa836d2eb7b345119794d81dcfc69ae1f92d216a8a7d898cdc31

  • SHA512

    428b503e295b849b2cc0d31eccb08eae11604321ae6d25a9803cc42064adc45f8e524d906b388d921f4b1432dcc8af783e8019bb6813c5d0dc64c71049f0b473

  • SSDEEP

    1536:jrMW/Q5qT+obOknvKlR34AtCR9cYWEhQWBMe3Dl1cOVivpWTvTEadkzm4uFRuFa:3MFX3MClrUR9cYWEl+OCaEaRrCa

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://185.79.156.18/t/d1/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66970f974aa3e74d3da3f250dae8cc8bJaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections