Overview

overview

10

Static

static

10

0fb77cad82...18.exe

windows7-x64

10

0fb77cad82...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fb77cad8227e0237b8fae82ef871b40_JaffaCakes118

  • Size

    88KB

  • MD5

    0fb77cad8227e0237b8fae82ef871b40

  • SHA1

    20107daae3910d07b6dbc911ccf0dcafbd9dfc34

  • SHA256

    cb9d049e790e033e556595aad17839ebc58ce65aaf5e79b4b12a7096cf05f36e

  • SHA512

    a6de30ab1390d2ec6e0edf4b7d82267f801f452fd15c0975a001598a434c784cea7b0419091d9ee15d999d38251924c9765fb0217e74898d6e04df981b9614b4

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEItXkzZ3:9dOy+ubiDBzv+1H4OgYEItY3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://bagzibagli.com/default.php?o5LmdLkOsiXdeZrRwWZmPcLzabrQp5r8DNoHQ

http://koraykose.com/default.php?2ENQB8oMCnzCFhK6KKfNtjEMwsFdBNp7HOoTUA

http://postylion.pl/default.php?RBdMxAuambVrbr9xUVFZwMLvpTuYyL3TqJ6bdXC

http://laboratoriosnorvet.com/default.php?8nhPKOjq4xbZWnrgNTVnqGmGVqTPd

http://zhotzuko.com/default.php?9IvINYtW5kFZVqhweuqbYwURrEWtJj58pX7ySqa

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fb77cad8227e0237b8fae82ef871b40_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections