Overview

overview

10

Static

static

10

a110cac7a4...18.exe

windows7-x64

10

a110cac7a4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a110cac7a43e560ea512dcfd811d6a8c_JaffaCakes118

  • Size

    88KB

  • MD5

    a110cac7a43e560ea512dcfd811d6a8c

  • SHA1

    cbfd89d283fc30a1a9eb60cfeb3bfebe3a388c0e

  • SHA256

    607f9d75862b7e7a7e18b24f9241d7f11639bf1de121863e959134cbd7817093

  • SHA512

    9ea15c7db59799b0d6a3f1de0d1ab712f361fe514782456f4a8d3b4d7045b5e1beb7bbcd7823b18914ab88c3ac6276924fd43b0b5079256787a84902d91c8c3a

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEInkzZ3:9dOy+ubiDBzv+1H4OgYEII3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://bagzibagli.com/default.php?c8okVEEVzNRe6bEpMMk5DtjwfVjkpt3SEgOcb

http://koraykose.com/default.php?KJqCH7cbkEBMD6a2bkSPxgezjLJvuzQhoJYtrI

http://postylion.pl/default.php?EdLLW8WyRhiwnRFqXRTXE3pRB9rOshDwwRnj1F3

http://laboratoriosnorvet.com/default.php?Q6LY5Lpp7HtnNTjjE72dzn3pJmVt7

http://zhotzuko.com/default.php?UTB6pxprx6FFkjsnATZarLUJvlvS3qTzdVi4Coy

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a110cac7a43e560ea512dcfd811d6a8c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections