General

  • Target

    f40dfb6171c96df2a2f274ee2e14a28c_JaffaCakes118

  • Size

    39KB

  • MD5

    f40dfb6171c96df2a2f274ee2e14a28c

  • SHA1

    9f47c1f1ec51e1d1612d31b8286df1fa8402f5ef

  • SHA256

    971f5b8a9b01c941ab020856e618a28a6270f42d063206dcec8d58d4d42a4155

  • SHA512

    9ac0e31ba6147ed2704c3df99e9c3239a3413e58597eb2d26b8bace94131066e0715078c1aacd85921e844a25c1577b74cd0418e41b008a3b4376408a8cbd75c

  • SSDEEP

    768:Sw2ChOLWYog0g2cBHxkRKr1ksuNIH1ZdHFS220CGzSNKrs0J0mf:gegVXHxk8ZkXNIVZD61NKRJv

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://kasatus.se/blyeat/gate.php

Attributes
  • payload_url

    http://kasatus.se/blyeat/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f40dfb6171c96df2a2f274ee2e14a28c_JaffaCakes118
    .zip

    Password: infected

  • shit.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections