Overview

overview

10

Static

static

10

86456bf55e...18.exe

windows7-x64

10

86456bf55e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    86456bf55ed69f0bdca030d7822cc2b0_JaffaCakes118

  • Size

    88KB

  • MD5

    86456bf55ed69f0bdca030d7822cc2b0

  • SHA1

    5f0e1a0008c89fd5cb31614fd957651fcf821d8b

  • SHA256

    be2b68f0d21a9245c093ac9cadd7cf44a700c7054ccf3e5a76dacc3e8a1c16ca

  • SHA512

    0fc6399ecad85a3657f5d7f5017ae54938e29840ebcf81cb4e467bb0621bc28fd1516b44e9fa3c93b3bfea0ed1d834300f98681b3cd69354baceceeba5bc68f0

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIVkzZ3:9dOy+ubiDBzv+1H4OgYEIG3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://odtpl.com/default.php?TIVjljdKurXFwrE2JOQBwozqBx7kOhILJyuTvFeoPC

http://visionnairecafegurgaon.com/default.php?DWtvLXE5hyZX7TTUYToNwecgc

http://sstindia.in/default.php?QFJfIgILIKegl2IVMqtlu3FLfsM9TMFZS1oJUs8I

http://oldspringdalians.com/default.php?lVwoNXghlRzEpYIH41E6wqlZZf5XbmZ

http://aonebioinstitute.com/default.php?zMsyJLsuSRfjjtj51HtTEjWdrRm7ftt

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 86456bf55ed69f0bdca030d7822cc2b0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections