Overview

overview

10

Static

static

10

6c342e7a6c...18.exe

windows7-x64

10

6c342e7a6c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c342e7a6c35a6b758653119f15457af_JaffaCakes118

  • Size

    91KB

  • MD5

    6c342e7a6c35a6b758653119f15457af

  • SHA1

    7b7377a5a0f97219ef24b31096c74d43b0993aa8

  • SHA256

    ed75c9ecd45eb487354abc0b40b4ea5c27cdc636cbbc07d55241a65cc3004efa

  • SHA512

    1f2bb8d38ac3400868d3080714c128f396e457bd299edfd5ed2efc897b8b956cb09cd7a6e2583949c2c916f6cc3777b2d14faa60129f9ae0620812d1c2a3b2f0

  • SSDEEP

    1536:I0Q89eYqqTn2Nnb6omC4rTqdPzpGSRuCscRaquHmjlBO+IkETvKEKLkzmj9:HiY+2o6rTqdPzpGSDrRaaBOhmEKzZ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/forum/viewtopic.php

http://siteseoguide.com:8080/forum/viewtopic.php

http://uksonlinedating.com:8080/forum/viewtopic.php

http://199.59.56.105:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://dinodel.de/as0vC.exe

    http://www.mssdatamasters.com/U2iuT.exe

    http://www.jwenba.de/X6HF4.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c342e7a6c35a6b758653119f15457af_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections