Overview

overview

10

Static

static

10

00011bf748...18.exe

windows7-x64

10

00011bf748...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00011bf7484b730cf304265d57db8d77_JaffaCakes118

  • Size

    91KB

  • MD5

    00011bf7484b730cf304265d57db8d77

  • SHA1

    7cef4723016106127dc78468dcabc42ad09fd730

  • SHA256

    826b6a44f7f26dab90a55037394471b098dbe21052be083060c2c5c7a462d9e5

  • SHA512

    3603e7f386892e2aece2a3bc3fcd69b274c52e8b11bc7fc8167de91b10c78d7e58e115caf978cccc2dde60fd44a9a9c12bb93c308aaf8dc1707a638c3e937126

  • SSDEEP

    1536:y8U8Fal26qTTqNfXVxsvKQaxzhiS9FuwkY3OHzCfhtOWJstTvOECckzmvZ:ZCl2W9i1axzhiS+/YewtOwJECwh

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/forum/viewtopic.php

http://siteseoguide.com:8080/forum/viewtopic.php

http://uksonlinedating.com:8080/forum/viewtopic.php

http://199.59.56.105:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://demo.pageperson.com/xEc9.exe

    http://www.mycio.mobi/G8M.exe

    http://clouds.sub.jp/q4w.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00011bf7484b730cf304265d57db8d77_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections