Overview

overview

10

Static

static

10

0009ff2d05...18.exe

windows7-x64

10

0009ff2d05...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0009ff2d05ea36df12ddf9218a8d95e0_JaffaCakes118

  • Size

    89KB

  • MD5

    0009ff2d05ea36df12ddf9218a8d95e0

  • SHA1

    9b5cc966fdb04d6631cb2d12e139a20335aaf291

  • SHA256

    a9ad9d9abc72159a8d0e5ed952a77ddbfe10853acead758af38f0442880c63db

  • SHA512

    2e51eae45878f0a3c2ac56393102f9e925c369b40b248c228c3655f8a5fd82d53afe89be3993bcab55c69465277f7588ffe6bd2a44dbea3bb3c61eed75187d5f

  • SSDEEP

    1536:SRq3u/ocUqTpuQJ40VP5aBGeOavutcIH5Y4OXsGATvME4ekzZ2:MK9c80VP5a0eOMAcwOXLtE4R2

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://6.magicalomaha.co/forum/viewtopic.php

http://6.magicalomaha.com/forum/viewtopic.php
Attributes
  • payload_url

    http://woofterelectric.com/AjaLR5b.exe

    http://bayareascrew.com/b2o.exe

    http://danschultzdesign.com/NR0Kz9Yk.exe

    http://newsonline.com.pk/cYL9tgbA.exe

    http://hoamatli.homepage.t-online.de/rsDPwr.exe

    http://lmcards.com/yyyaud.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0009ff2d05ea36df12ddf9218a8d95e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections