General

  • Target

    e345bf1bcf5ebf88507f41c89c952978_JaffaCakes118

  • Size

    90KB

  • MD5

    e345bf1bcf5ebf88507f41c89c952978

  • SHA1

    8296655f48cbcc3ae06a5c8a2f608cab9d74baca

  • SHA256

    96ddf8fdae55bf2c16b47dc9dfc6c115f42c209073f953b0df8a40fb0f6bbc18

  • SHA512

    3a32a6b0469d5105ef6a20ae45444d7af691245ab6c858da321c5cb8112288336c200ff08e02a75d80132cf68190b72a902c3f87015727436a90228d3c9f9803

  • SSDEEP

    1536:bbC33du7pqTD9jijWMUUpcg8kptZyrMIR0Q5LUoqOdum4TvGrEwsFkzmpv:PC3g9jmUcg8k18FR0QqOpEwEpv

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://minddosentshe.com/html/poten/gate.php

Attributes
  • payload_url

    http://minddosentshe.com/html/poten/pony.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e345bf1bcf5ebf88507f41c89c952978_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections