Overview

overview

10

Static

static

10

4c929e2d81...18.exe

windows7-x64

10

4c929e2d81...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4c929e2d81daa78732931d56c9290efa_JaffaCakes118

  • Size

    102KB

  • MD5

    4c929e2d81daa78732931d56c9290efa

  • SHA1

    a7be0b7b77be33c35e8d9a7459a4b763a7d5b0cd

  • SHA256

    1685a1387629b3ee0eb9a8dd9ec142116c1921705d152e506b535cd744cbd706

  • SHA512

    0407994b58794661e8fdd1c224f5214ef1744e00ce1f5a6bba11802715d16c9d44bbf56c6640b8f50a75755717eaecab768bf82cf4d56dfd3669942b468d2724

  • SSDEEP

    1536:njAqR9PLqTMVDIUKmgklCaayrjZnO8rC/wqONsrTvbAhIkzbKf/RC:jPLP/KtadB4ONsglg/RC

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://muchsoper.ru/sliva/gate.php

http://righlingrob.ru/sliva/gate.php

http://hasandrec.ru/sliva/gate.php
Attributes
  • payload_url

    http://yeah3.sakura.ne.jp/wp/wp-content/plugins/hsf.exe

    http://material212.com/blog/wp-content/plugins/zgoiwipquei/hsf.exe

    http://www.romediscoveryitaly.com/wp-content/plugins/hsf.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c929e2d81daa78732931d56c9290efa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections