Overview

overview

10

Static

static

10

3efc0c088e...18.exe

windows7-x64

10

3efc0c088e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3efc0c088e3479ef7ab47f4ca4ac02ee_JaffaCakes118

  • Size

    89KB

  • MD5

    3efc0c088e3479ef7ab47f4ca4ac02ee

  • SHA1

    c94f5e40edd2bd89fdd6f101b4815353a5aac1ff

  • SHA256

    0b799b5b9e9dd64d7d5de7b6dcb70da1a48968e54fc682d832eb4b03f5b93302

  • SHA512

    854fe9c2142e207885a920507d960cd3175acd385e5cce25d2ecbdea50c8d135250773125b61636f2931232dbd1ecb89a11fd1746bc7a7489d35765ff39abc76

  • SSDEEP

    1536:/FV+HBK6qTZQ+hxHsfJqB1UtudtMiGOmAcUTvdEYLkzZt:dVQKVxHsfJM14VOmmEYkt

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://213.155.112.85:8080/forum/viewtopic.php

http://97.74.197.122:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://fengshuitonight.com/80K.exe

    http://www.cppiledefrance3.info/diJPN.exe

    http://www.pve-sc.vn/hRm83qfq.exe

    http://prodivemex.com/QVyynC.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3efc0c088e3479ef7ab47f4ca4ac02ee_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections