Overview

overview

10

Static

static

10

a761b2ff26...18.exe

windows7-x64

10

a761b2ff26...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a761b2ff26d3449933fcbdd0f28b0d40_JaffaCakes118

  • Size

    88KB

  • MD5

    a761b2ff26d3449933fcbdd0f28b0d40

  • SHA1

    804620f9c49d91fa1facf5179d8ba02fbdc4570c

  • SHA256

    41ce7866b1fd53bbb07198fe52100d067ff2d6e272dd204eec8d6bccadac1e5e

  • SHA512

    ae1642acedbf841dfb8130a5c328a9f95e50c38b51a4085b5a821117de8ca89ec0b37a6752885dbcaef5e2fb7f8c866b2e531c38f48bdcec3ad489c1ca35d35d

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIthkzZ3:9dOy+ubiDBzv+1H4OgYEI03

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://rowcom.co.uk/default.php?Rp6Cw3pBBntnPgJTpyCLLHUMPyfTNrkhcJj7ccz

http://arnoldcamerata.co.uk/default.php?3kl642QSJexKbo6dgPKD1zziJshvAJU

http://emieten.de/default.php?XnJyCXPTpZtHdQxAowYelcK8hymozoWr5QaZ9RLx1

http://cad-team.de/default.php?TrVhmg5ZLzQSJrODg4p2llaAiLNy52Bh85KgzGnB

http://beer2u.co.uk/default.php?T1n7cELTYYmUj67cgdAgr6reSsuSPXEupBATX4O

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a761b2ff26d3449933fcbdd0f28b0d40_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections