Overview

overview

10

Static

static

10

670fd632dc...18.exe

windows7-x64

10

670fd632dc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    670fd632dc48d7699db272c27daa82f4_JaffaCakes118

  • Size

    108KB

  • MD5

    670fd632dc48d7699db272c27daa82f4

  • SHA1

    3369e9e950b11a7013a5b05e680448b64117d137

  • SHA256

    2d8c515ee7e34f0919e05a8b0a7e4ab7fc73370d2a602e613e0e734b78313cbf

  • SHA512

    0c46df3f716470ff6f541da0c0d58b4775f3b95912a7a319c31e2fbfeb38d08f02bf538fa06da9e7e741ffdf7d11874fcf8ff0594a2be68701724d9e239c1122

  • SSDEEP

    1536:LIZW7B03onqT3posPJleG9mqUluvTeUr7muwXmybOVlwFTvzkzk7wqeNvu:MU7a4VsRSnCH72OVmdUqeg

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://octpendant.org.in/smooth12oc-12nov/gate.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 670fd632dc48d7699db272c27daa82f4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    085f942c74d09a78dcd2b95a4c1c7441


    Headers

    Imports

    Sections