Overview

overview

10

Static

static

10

a20518eda2...18.exe

windows7-x64

10

a20518eda2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a20518eda2e0da94ab0cc6bf8906148d_JaffaCakes118

  • Size

    89KB

  • MD5

    a20518eda2e0da94ab0cc6bf8906148d

  • SHA1

    e038ef10bbe1a8f66025b9c1a3c7e6246f85fd0f

  • SHA256

    fed1779e427daa2ded24b886095db06b35e8e9b5bcf03515dc88e50cd0c02d51

  • SHA512

    7112a521eb0ddc791e31cccec05e5d64ba77f6f2f3339c45a51c8f1825a76a0c31bf2b2eabc2be814551a3ea212aa934b63a4d0a164205fd88eb1084749cec23

  • SSDEEP

    1536:sbL3gPX3+qTJ9kmElhU65x8/dVeuUxOITpOvQARTv8EYiqrkzZm:Ejgb6hU6T8/Sx7Ovx6EYrEm

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://br1.irontrial.com:8080/ponyb/gate.php

http://br1.pineapplesdonthavesleeves.com:8080/ponyb/gate.php

http://89.166.50.40:8080/ponyb/gate.php

http://6.magicalomaha.co/ponyb/gate.php
Attributes
  • payload_url

    http://wolfgang-leier.privat.t-online.de/FpU35BX.exe

    http://tlamu.com/10EA7G.exe

    http://donorlife.co.za/NLvZn.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a20518eda2e0da94ab0cc6bf8906148d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections