Overview

overview

10

Static

static

10

4804aaf4e1...18.exe

windows7-x64

1

4804aaf4e1...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4804aaf4e145ed7f8b0d887e8a0793b9_JaffaCakes118

  • Size

    752KB

  • MD5

    4804aaf4e145ed7f8b0d887e8a0793b9

  • SHA1

    0c272ead9fe831b963ec876a4fa83a79e54df17b

  • SHA256

    257de83c92eaf4d3388c2ef8a687fbcb1ab7fcfd6a4e1a96dfe98bfe9851293b

  • SHA512

    2e5a76ad21f55bce72fed148b16ffdc38c62d04671d6bf6e81ce9f78b52d6559cd38ef9ff47382429ecb117ef4d261964ce134f3b2a65d6f3c643d5f73391923

  • SSDEEP

    12288:BNZpU4nG7hDSIKqJW99Vfwdpiune7mWiLKlSED47lMLfsK6MOyGc2NLS:rdnG7hDSIKUW99Vfwdpiune7mWiLKlS6

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://insightthk.com/pop8dot/gphs/gate.php

Attributes
  • payload_url

    http://myp0nysite.ru/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4804aaf4e145ed7f8b0d887e8a0793b9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    7fbd02de35df48d62ddef4752e35f158


    Headers

    Imports

    Sections