Overview

overview

10

Static

static

10

a684767d5a...18.exe

windows7-x64

10

a684767d5a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a684767d5a0de26d2d2afd6da9348e48_JaffaCakes118

  • Size

    91KB

  • MD5

    a684767d5a0de26d2d2afd6da9348e48

  • SHA1

    60f8a0fb7646e38101768c438a8245303ed4b6d7

  • SHA256

    de353e5a60e0a7307124a9e9d77a6dd30633c4b8b8b601785ea716d74466dade

  • SHA512

    d83c713543416af737d3660be04ae93ef611ef5bba69b721525491a4f1fbcaf3606f70c22d410d3b9d5a9a12521a2047f17a08af06bde90c275703ca66dc3379

  • SSDEEP

    1536:p8uMR0+mqTVINP9tLuOoyTzRMSPBkWEGjpKp0RrHOyu8ZTvOECIkzm9J:m2+G7eyTzRMSCxGzHO71EC0/

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://weshift.net:8080/forum/viewtopic.php

http://207.58.180.139:8080/forum/viewtopic.php

http://aoc.fm:8080/forum/viewtopic.php

http://changepioneers.at:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://searchplus.ca/uwPWQ.exe

    http://www.torinoacquari.com/tLy6ewd.exe

    http://test.activeim.com.au/WBv.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a684767d5a0de26d2d2afd6da9348e48_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections