Overview

overview

10

Static

static

10

ba48843673...18.exe

windows7-x64

10

ba48843673...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba48843673ce28ef5daeb81b648b9720_JaffaCakes118

  • Size

    89KB

  • MD5

    ba48843673ce28ef5daeb81b648b9720

  • SHA1

    b49c73c39bafd5d1772a8f12d54f0fbad1bf377f

  • SHA256

    c22fc24ac4740ec68fda426d13c02ed7e41eb46ba2499b18d7dc6d0d3342e236

  • SHA512

    84c7c812378f5f87d327121c827d297d88eac5f696f4efae7dc4991ab9b0f6b1fd741fb732079c0edfa85eaf02c8fc1671c1347d75091ab2d41534318478656e

  • SSDEEP

    1536:Uxa3ufYMFqTwepumJa2WuO9b/uWF3JIbO3MR3Tv8EYnkzZn:CatMXmJa/uOdbIO3cwEYIn

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://br1.irontrial.com:8080/ponyb/gate.php

http://br1.pineapplesdonthavesleeves.com:8080/ponyb/gate.php

http://89.166.50.40:8080/ponyb/gate.php

http://6.magicalomaha.com/ponyb/gate.php
Attributes
  • payload_url

    http://01ebfef.netsolhost.com/YzLYrX.exe

    http://newsonline.com.pk/FuTEqaoT.exe

    http://www.sieg-vergaser.de/9wBu.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ba48843673ce28ef5daeb81b648b9720_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections