Overview

overview

10

Static

static

10

a94c43c315...18.exe

windows7-x64

10

a94c43c315...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a94c43c3154ae635e1571968d71040e0_JaffaCakes118

  • Size

    88KB

  • MD5

    a94c43c3154ae635e1571968d71040e0

  • SHA1

    8eb2b7fbd407f34f409d9a91b48587f92f5248e3

  • SHA256

    e0df1a2bb30057e2e16cab1fea9fedc19af1e291f0a96df0e2aac74ca777bf23

  • SHA512

    0e18afe415a58aca48963ba1ef3c9ae0e09fd8c4c20b59854402aaf5560b41593f203f6c8d4374308e339705e85f0679cf86ff42dea070ee49a4c179cfbcde5a

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIbwpkzZ3:9dOy+ubiDBzv+1H4OgYEIbwi3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://dsscg.com/default.php?PYW7XCsLZKFary7FNoFoFjVXcrt7L9wY9ktmnZflCn

http://cyclehead.bplaced.net/default.php?aeUyQZuJAgP3f3puxtybag3SRyxOpl

http://wideshaseva.com/default.php?uEHQsVgRZiDR96KssMqR79oGfNKr33M8gQrH

http://gameworld.tr.gp/default.php?RJ1aRdLK1D5H6pcnFL1YaMEJ3eAEu3f2FXeK

http://tspaccom000.web713.discountasp.net/default.php?LmH5TANxD3vuoDqTj

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a94c43c3154ae635e1571968d71040e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections