Overview

overview

10

Static

static

10

81896694bf...18.exe

windows7-x64

10

81896694bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    81896694bf7d86cbc881fd3997ae622b_JaffaCakes118

  • Size

    161KB

  • MD5

    81896694bf7d86cbc881fd3997ae622b

  • SHA1

    55fb15d502c27162f5658955991eefd6864f779e

  • SHA256

    bfeed31235881a8b7a04f0ff5709dc099ac101580cd32857f229486f8dd192f3

  • SHA512

    9dcc0b7045c5c326765d5cbc07a12212616bedd28fc7a4e7e5c0ac4fbd11d63686db9e05a8329c79336e7477305a3a1a3876cf29123e78c163c5155f3ca64d8e

  • SSDEEP

    3072:siTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKndh:HTLFuD6fOXlql/GLJrqqndtndhndKndh

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 81896694bf7d86cbc881fd3997ae622b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections