General

  • Target

    aeb7fd528e1aae6fb3342c15a81f3bdc_JaffaCakes118

  • Size

    1.4MB

  • MD5

    aeb7fd528e1aae6fb3342c15a81f3bdc

  • SHA1

    0bfb3f0bc68df1745e325b687afdaff4c2db3fea

  • SHA256

    b2a2c9121233267cc60ade63af1e16638492dcc714d9718b634dfa920fe1f399

  • SHA512

    bc031536af07ce66e8f48f0166b00c054cda9ccbf3cc6be28f484434f059c732abaf834a865062226386d95f55cfe5dc020fbda81855d7dfc6c9be3883a2fc1c

  • SSDEEP

    24576:YTrehuUZvCDoxWuqMbKtTGjEkg8Arv0dABIO+NKrTYOwdct5nl1NRwU7vELrK:YuhuUXGFRklAzwCIO+Utt5nl1NG4ELu

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://affis.ru/gate.php

http://affis.ru/path/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aeb7fd528e1aae6fb3342c15a81f3bdc_JaffaCakes118
    .rar
  • instagram Profiles Cracked By PC-RET (13.01.2018)/GPUCache/data_0
  • instagram Profiles Cracked By PC-RET (13.01.2018)/GPUCache/data_1
  • instagram Profiles Cracked By PC-RET (13.01.2018)/GPUCache/data_2
  • instagram Profiles Cracked By PC-RET (13.01.2018)/GPUCache/data_3
  • instagram Profiles Cracked By PC-RET (13.01.2018)/GPUCache/index
  • instagram Profiles Cracked By PC-RET (13.01.2018)/Local Storage/https_www.google.com_0.localstorage
  • instagram Profiles Cracked By PC-RET (13.01.2018)/Perfect
  • instagram Profiles Cracked By PC-RET (13.01.2018)/Proxies.txt
  • instagram Profiles Cracked By PC-RET (13.01.2018)/Setup instagram Profiles .exe
    .exe windows:4 windows x86 arch:x86

    6112ac1abcf5fa0d96ec0b4b96090842


    Headers

    Imports

    Sections

  • instagram Profiles Cracked By PC-RET (13.01.2018)/cfg
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/am.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ar.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/bg.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/bn.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ca.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/cs.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/da.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/de.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/el.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/en-GB.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/en-US.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/es-419.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/es.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/et.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/fa.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/fi.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/fil.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/fr.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/gu.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/he.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/hi.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/hr.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/hu.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/id.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/it.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ja.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/kn.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ko.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/lt.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/lv.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ml.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/mr.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ms.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/nb.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/nl.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/pl.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/pt-BR.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/pt-PT.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ro.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ru.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/sk.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/sl.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/sr.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/sv.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/sw.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/ta.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/te.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/th.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/tr.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/uk.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/vi.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/zh-CN.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/locales/zh-TW.pak
  • instagram Profiles Cracked By PC-RET (13.01.2018)/tasks/222/Timer.txt
  • instagram Profiles Cracked By PC-RET (13.01.2018)/tasks/222/cfg
  • instagram Profiles Cracked By PC-RET (13.01.2018)/tasks/222/columnsOrder
  • instagram Profiles Cracked By PC-RET (13.01.2018)/tasks/222/data_1
  • instagram Profiles Cracked By PC-RET (13.01.2018)/tasks/222/data_2
  • instagram Profiles Cracked By PC-RET (13.01.2018)/tasks/222/data_3
  • instagram Profiles Cracked By PC-RET (13.01.2018)/tasksOrder