General

  • Target

    cb50bb1584c4ffeeec90885ab5850001_JaffaCakes118

  • Size

    161KB

  • MD5

    cb50bb1584c4ffeeec90885ab5850001

  • SHA1

    d354140260e6d336e4497483202e33e63398e12e

  • SHA256

    7c44724b0b4486b2229acb80cf0bd0eb424b7f606c3f54fad44f75476057c67e

  • SHA512

    a37b697d4c83a7e8563a35d3058358c6c1cd121ad7cf5f5df9f66c844e32454b5c30f3dc69ff2062a4dc3449aab7f1b07d73de9d947c783243dbaddb32323449

  • SSDEEP

    3072:oTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndI:oTLFuD6fOXlql/GLJrqqndtndhndKndI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb50bb1584c4ffeeec90885ab5850001_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections