General

  • Target

    b22258989a5e93d4cb1c3960441c1c06_JaffaCakes118

  • Size

    90KB

  • MD5

    b22258989a5e93d4cb1c3960441c1c06

  • SHA1

    a95d281718ae3881b2a77d68619357bff1a3bea2

  • SHA256

    91633275b9c1168066420cba184bba446bb6197082e6638b9cc253b94a1af4aa

  • SHA512

    8f9bd440e8a3f9702297ed24bd45d00797f679df0db247b3c9fb1a9c2a7cf51b70547a29e1ee202774b0ea5205c14afaccd5a9269bdcac72b392f8c5ec7df801

  • SSDEEP

    1536:UbSTIIuaqTwAraowPrvjE88AK2T69+hw5xvbEYiODgY6ITvVEwXkzm5Z:ySTM2owP/E88AKk6uw/sOkYBEwH5Z

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://toxhoster.net/forum/gate.php

Attributes
  • payload_url

    http://toxhoster.net/forum/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b22258989a5e93d4cb1c3960441c1c06_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections