Overview

overview

10

Static

static

10

28b5969344...18.exe

windows7-x64

10

28b5969344...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    28b59693445eea1dbcc2cdbbbb79be69_JaffaCakes118

  • Size

    88KB

  • MD5

    28b59693445eea1dbcc2cdbbbb79be69

  • SHA1

    355b17bfdeede5ae20878d2ce1c8e5006759f32c

  • SHA256

    b239398694e6ac44f230e96524344e50106bc64a66502688f2aa865cd9a3d16a

  • SHA512

    8c631668a825b20a24f0fdd63003e89634500de63c0c651276072e168f89740ec0fc3713b01465267aaa9da46def70eb387677b37044afefb9a252201ca72c3a

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEITkzZ3:9dOy+ubiDBzv+1H4OgYEIc3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://rowcom.co.uk/default.php?vkhdoRGUxNaITl5dLmR3ZF7DWvLe9f5DLPtaUFB

http://arnoldcamerata.co.uk/default.php?apjCDQQHLc5PVG5IK7QCDwg83rvsEhJ

http://emieten.de/default.php?zeXIQHBRlB5kig8CsFxaQmqQy4tJylaX3GoSHbmS3

http://cad-team.de/default.php?hq7hGLhb8YV2iTLpTgqF5zfN4xaBhvUOuwVzWJRL

http://beer2u.co.uk/default.php?AxBseg4lkWtcc5AJSiNURpMMgbCNK89diMpQ3mj

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28b59693445eea1dbcc2cdbbbb79be69_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections