Overview

overview

10

Static

static

10

4f7f09fbb4...18.exe

windows7-x64

10

4f7f09fbb4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f7f09fbb430383ff296a7c1c06fe534_JaffaCakes118

  • Size

    93KB

  • MD5

    4f7f09fbb430383ff296a7c1c06fe534

  • SHA1

    0978aa07ce2997ae6ac31049edb217908a401eed

  • SHA256

    1c7886fb78c1983371c34fd19927c59971268ba249223f0ce615e1f11a83a4de

  • SHA512

    ba2b02324e30171eca7f35c87835b421007358b38a0709c7a4bfb04cd82c6002812c13814820671bd647f3a609f137006131ad74c1baa3b503b161824273621a

  • SSDEEP

    1536:6ULVDtacqTzML0geBd2V4ZpAwf2320YTxhOraLTvY3kzbkNbJ/W:xBRab6eKV8AwfZOOn8l/W

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://usviktory.de/panel/gate.php

Attributes
  • payload_url

    http://serverx.com/y/file.exe

    http://uhost.ru/calculator.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f7f09fbb430383ff296a7c1c06fe534_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d3549136e9c784781c0ee97e9f3878ea


    Headers

    Imports

    Sections