Overview

overview

10

Static

static

10

bed9ebe125...18.exe

windows7-x64

10

bed9ebe125...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bed9ebe125e7ce6b537a0c51cd595c4a_JaffaCakes118

  • Size

    93KB

  • MD5

    bed9ebe125e7ce6b537a0c51cd595c4a

  • SHA1

    f2156614c60c79e9eeee4289995e103737c4dc93

  • SHA256

    6b1f6614a5e74d8c39a17c3a741acc4eb0db0def5ecde5c8c8fe0bb969d2714d

  • SHA512

    267b00a24f79eb1f1a74a4093c07f45068b6309fee6cadf686c9c672cfcad09d1390419c19bd57c1a7eee8f2b5b5b70682e1673b12082add4b5f6efc1d8b8c5a

  • SSDEEP

    1536:jULVDtacqTzML0geBd2V4ZpAwf2320YTxhOraLTvY3kzbkNbJ/W:YBRab6eKV8AwfZOOn8l/W

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://usviktory.de/panel/gate.php

Attributes
  • payload_url

    http://serverx.com/y/file.exe

    http://uhost.ru/calculator.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bed9ebe125e7ce6b537a0c51cd595c4a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d3549136e9c784781c0ee97e9f3878ea


    Headers

    Imports

    Sections