Overview

overview

10

Static

static

10

2646361c9c...18.exe

windows7-x64

10

2646361c9c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2646361c9cc02e9a1c83a6365856c03d_JaffaCakes118

  • Size

    91KB

  • MD5

    2646361c9cc02e9a1c83a6365856c03d

  • SHA1

    8b65267a1cf2d06bda636fa099375ed333409dd1

  • SHA256

    85b34ac93c711d3cddc29cb5b4b2c1f14b13741f811f7e676092c223fdf03c7d

  • SHA512

    78c8fde5a8c3196e529bfd1b8a8de7b4003f923b26c50b453932f28d82fbb132ede67c4dc9d2599fcdfc6a6193d3210da4dda9d2d22947025ca12ae1ff3bbc89

  • SSDEEP

    1536:k+XKeJIqqTA7Njm7hDS2RGzMsSo1dZ8LPKDwVGeSOsQOnTv6Eq4kzm4D:dbIwAVRGzMsSQiPNSOz5EqEc

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/forum/viewtopic.php

http://siteseoguide.com:8080/forum/viewtopic.php

http://uksonlinedating.com:8080/forum/viewtopic.php

http://199.59.56.105:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://kfz-youngtimerservice.de/wPemfSc.exe

    http://shiplouisianaseafood.com/eyP.exe

    http://www.mycio.mobi/G8M.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2646361c9cc02e9a1c83a6365856c03d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections