Overview

overview

10

Static

static

10

Pony.exe

windows7-x64

10

Pony.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80bab323103e8212f7f624b8cac39b68_JaffaCakes118

  • Size

    160KB

  • MD5

    80bab323103e8212f7f624b8cac39b68

  • SHA1

    121f0d444114ab55c45c954233f57dc5f3406dae

  • SHA256

    a1cc67c8713bb30d005de080255b1f811b9b1d6d91ea182b49c7496260f651cc

  • SHA512

    9ee37553f417be3d17bba60b8945ec49bf072ec594a429669c9c9ec7291f6cb89998b31debac42224d79fca48253c497778389cddc8acfefd87ae6680206698e

  • SSDEEP

    3072:Pa5YpKseKiYoMSjEDb/aQZ9J8jLbud45MW64JdeDRUcPvqXc:PlV1NoMSj+b/aE9cbudsj64JdCRUCqM

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://genic-enterprises.website/www/gate.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 80bab323103e8212f7f624b8cac39b68_JaffaCakes118
    .eml

    • http://www.almoayyedintl.com.bh/

  • Pony.zip
    .zip
  • Pony.exe
    .exe windows:4 windows x86 arch:x86

    fbab3e022f0aa68f4af07dff0d4cfb9f


    Headers

    Imports

    Sections

  • email-html-1.txt
    .html