Overview

overview

10

Static

static

10

5addf0943f...18.exe

windows7-x64

10

5addf0943f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5addf0943f4a40ef3d361cd680a7882fJaffaCakes118

  • Size

    157KB

  • MD5

    5addf0943f4a40ef3d361cd680a7882f

  • SHA1

    062602b3db2184ff0d5f3eff9c3056425e7cd847

  • SHA256

    df248ffc5ba32ff5a66a867e1220a17b5c93984d3ee41ded4c807aa944f4ce5b

  • SHA512

    829d4a3e518805522b387df342ab3e6fa49b8a29d496d8dbdf37be6def79790d7df5d1b287afdea2fd96c2c9df9361cc704e1df59f451abd7a24faf137984a68

  • SSDEEP

    3072:4SMoSJiJtqwqTNeOE01Ewv2ngT5TqpZKX+DKhN4fEeZGm/yg87hIMDCx7v5zKS2J:4SMoSJiH+TcOMng

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://2223.pytalhost.biz/WP/gate.php

Attributes
  • payload_url

    http://2223.pytalhost.biz/WP/next.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5addf0943f4a40ef3d361cd680a7882fJaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections