Overview

overview

10

Static

static

10

0276fa2117...18.exe

windows7-x64

10

0276fa2117...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0276fa21172e9beba8d9599a7f8306e0_JaffaCakes118

  • Size

    91KB

  • MD5

    0276fa21172e9beba8d9599a7f8306e0

  • SHA1

    e226a2ade3374532c737a030a565049c790280f9

  • SHA256

    49da44ea6f935bf68e4b22ad93fbef4e2697a84adeebe7f951893b31f57629b9

  • SHA512

    e0d5ec4066c73004802389e9abf6060311e82162a10d735ce7860f92f1c383c4aa99f001651442bc7bb8b5a59fa4ef53b3f3c9c4aa7d57de0032ab8802abe718

  • SSDEEP

    1536:78U8OCs6qTwqNfzuqkKPHfzgoSd6cXa/ISuzCfyYOMDJTv9ECQkzmvt:ovsRaqHHfzgoSRK/kYOQTECsV

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://3ecompany.com:8080/ponyb/gate.php

http://23.debtfreein100days.com/ponyb/gate.php

http://23.frameless-glass-shower-enclosures.com/ponyb/gate.php

http://23.garryowen.biz/ponyb/gate.php
Attributes
  • payload_url

    http://ftp.hudsonhort.net/3RWG.exe

    http://www.asc-360.com/0pT.exe

    http://ftp.magnusondesign.com/kQ4aws.exe

    http://emi-res.com/mYb1.exe

    http://ftp.rbeag.com/n62.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0276fa21172e9beba8d9599a7f8306e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections