Overview

overview

10

Static

static

10

25de8b47da...18.exe

windows7-x64

10

25de8b47da...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25de8b47da205556521f58906686c641_JaffaCakes118

  • Size

    1.5MB

  • MD5

    25de8b47da205556521f58906686c641

  • SHA1

    8066faf4c6654b004e4376a581068df353714c05

  • SHA256

    beb4df86c9451e26f05f1d82852f02c0b7b31a41e1c354a398f2f8c34383044c

  • SHA512

    bd0c841570be1bff41948a0c870f72e8211dc1e072ca112a3bab5910a787eb25ef940f6e4c362296a70fc226051cca2fb329dd257672f1f8229309bc34fa74d5

  • SSDEEP

    3072:6d8sewAZZCbIEguEoiWdmaNftRiXKQg4o5SQIi:mRpcZCq4dmqUgtkp

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://178.32.160.255:8080/pony/gate.php

http://91.121.178.156:8080/pony/gate.php
Attributes
  • payload_url

    http://runningnews.com.br/8VH2A.exe

    http://standartkalip.com.tr/yBVZ0aNn.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25de8b47da205556521f58906686c641_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    24372f561e1e1d10d855a874a39472c3


    Headers

    Imports

    Sections