General

  • Target

    6af5b9b7a40c38956b6803715102e518_JaffaCakes118

  • Size

    88KB

  • MD5

    6af5b9b7a40c38956b6803715102e518

  • SHA1

    f682cdf6e138e31ec1e620f69ea78a9acdfc822e

  • SHA256

    b9e31573b1b2c2f646239e8b3a0f816d4aa68e3949dccb2aa3935455fd89d962

  • SHA512

    554a0ed4c71878f6f78e60ede3d58b5c14dbfc77cfb08e0dd7f18fb99b0492f33c93c3cc18cfb4a2f1a82e18d86cffba2268b222631c8333a17fd125fd4dd397

  • SSDEEP

    1536:IAUTPOqTfqSQVNC9GW84AguoPoF1zPtzOCvPfETvYEObkzmp0G:twyNv4Agu3OgfhEOjp0G

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://mahmutarslan.site88.net/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6af5b9b7a40c38956b6803715102e518_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9b4192c1bb37e89f7af1e420b76961bb


    Headers

    Imports

    Sections