Overview

overview

10

Static

static

10

5b6a8d4805...18.exe

windows7-x64

10

5b6a8d4805...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b6a8d48053a109f734a3f76538576f1_JaffaCakes118

  • Size

    559KB

  • MD5

    5b6a8d48053a109f734a3f76538576f1

  • SHA1

    eb753137975f03a8d5b8e333319d97bc6331879c

  • SHA256

    1f5727f2bb376c12395e954d8e0bddff7223f0e9349b49136eb9ed8a583c773b

  • SHA512

    d7b4c114d469aa5ecf746cbdfdc513db709570bfef38ff647d325d7465978e87afb9c8fe13659225addaad9f2001303af1b26622186545a164c9815814ba4138

  • SSDEEP

    12288:5uTOWwLsyfJ1Zesrk0qb641BS35AAX6aLlm9f+QxFBbv:FNHLo6GS351lmN+e

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://top-glenyx.com/ppnngrr/gate.php

http://marinzer-3.com/ppnngrr/gate.php

http://amerillia.net/ppnngrr/gate.php

http://matterix-net.net/ppnngrr/gate.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b6a8d48053a109f734a3f76538576f1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    fbab3e022f0aa68f4af07dff0d4cfb9f


    Headers

    Imports

    Sections