Overview

overview

10

Static

static

10

975b39abc5...18.exe

windows7-x64

10

975b39abc5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    975b39abc51c69a8084d9a9cd9796dd9_JaffaCakes118

  • Size

    34KB

  • MD5

    975b39abc51c69a8084d9a9cd9796dd9

  • SHA1

    9a21135e4ec774c4b9f5de3dfe41d77662f25749

  • SHA256

    7bf5fd3ef917e0af588c882de09817457f70e3de2ec65ca7be24f0514eb33f2b

  • SHA512

    b4cfc8cfb61f8832c2605ad9b094fa6e925921cf6b5402c96f4cb717363e6ce314efa247104b43cb23a9be82381785b31fba5a2a8049cd3121842620dc612061

  • SSDEEP

    768:DORCEiDZgIIzEAaD4kgCi0Isu1pM50vZ2uoQyIzjWft6/69QGBY7Uf:69i4EAaD4qiT1e5OZ2uLyI3Wft+69JYI

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://wegotakedistime.ru/success/Panel/gate.php

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 975b39abc51c69a8084d9a9cd9796dd9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections