Overview

overview

10

Static

static

10

65510ff01e...18.exe

windows7-x64

10

65510ff01e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65510ff01e6705f785ef2979060c56d0_JaffaCakes118

  • Size

    88KB

  • MD5

    65510ff01e6705f785ef2979060c56d0

  • SHA1

    a33ee79611cca2bfe90d5a220cccc8430408a008

  • SHA256

    284e279a759ebeb24243898f20b726a36e32a2fe0b9064bc8f664ec3e3f94f3c

  • SHA512

    ada9ba82fb3ab1712b3298e30cb2bc7de250ef784c198bdcb48ece2da6187b848dd71b297685b36a45ccbff4c3f7fe9634c8a1fba3e9e0365d03b18d8ce33541

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIckzZ3:9dOy+ubiDBzv+1H4OgYEI/3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://mon-business-a-domicile.org/default.php?cUvNEcOfgUmnpuVGcr2vytt3

http://brinkmanrolluiken.nl/default.php?SQYfBzxsG69rVTknNTsVt3qahn32w5H

http://arquitetarte.com.br/default.php?YFpSdSVxajSATv6sodQGRBkjIH3yroch

http://cvrecords.com/default.php?5HVX5gIDustjKc2EIUlGKr68USjlDnJQGy6cyz

http://w00d17d0.dd17136.kasserver.com/default.php?A7sYvE92qL8QDBUV9BXWm

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 65510ff01e6705f785ef2979060c56d0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections