Overview

overview

10

Static

static

10

7596015ebd...18.exe

windows7-x64

10

7596015ebd...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7596015ebd1fc3c61f259fabc5180857_JaffaCakes118

  • Size

    91KB

  • MD5

    7596015ebd1fc3c61f259fabc5180857

  • SHA1

    d2ec5de49e91651c1354d81e037b22c002c615b6

  • SHA256

    f40a1dcc7f39589de92543a60b4ede33fd04762896ac2a0665fb8ae5bc25564c

  • SHA512

    220e805255210cb4df94a700b30cc53149541fc20a7fd6664aeb1bd7bb06df30f26567be5744a73489bc9dad339c2af1e3a945896818e88e1c99220ed9844d5a

  • SSDEEP

    1536:k0Kst4onuqTJUNXmoEkH3LTqOQL9zUASTPaCsAnbNYFPrOwiEzTv6EqXkzmRH:/nnu2WH3LT6L9zUAS2tAErOFjEqH9

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/forum/viewtopic.php

http://siteseoguide.com:8080/forum/viewtopic.php

http://uksonlinedating.com:8080/forum/viewtopic.php

http://199.59.56.105:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://artistsindivinespirit.com/WyZyTNM.exe

    http://www.gisladulce.com.ar/NeQ.exe

    http://soanlahti.fi/AMF5Yh.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7596015ebd1fc3c61f259fabc5180857_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections