Overview

overview

10

Static

static

10

bfece35bcf...18.exe

windows7-x64

10

bfece35bcf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bfece35bcfe04c9ca09554d7a06570e2_JaffaCakes118

  • Size

    94KB

  • MD5

    bfece35bcfe04c9ca09554d7a06570e2

  • SHA1

    5511cd98c3c254a4b8d81d592adbb3deca67c75c

  • SHA256

    676d55f11efc11ee45d376e5b43d6aa1033feea4ac7143d20893dcf9da69b536

  • SHA512

    d926512d2f961d153eaff492316d0adb7fdda2e4c4762e96edade3f9b5dd4ee9594b24ffb47f4f6d96eddffc86e887df2c79dbd3048b160ffdcbd57418423142

  • SSDEEP

    1536:NO/YLJHyzqTlYcg4NtmZQV3aUFXj+hcPtpOZXQTv4kzbkw2m/M:YA9SlZqdjFpOxUl2m/M

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://pony2.lisx.ru/gate.php

http://pony2.lisx.ru/path/gate.php
Attributes
  • payload_url

    http://api.bitcoin.lisx.ru/5.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfece35bcfe04c9ca09554d7a06570e2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d3549136e9c784781c0ee97e9f3878ea


    Headers

    Imports

    Sections