Overview

overview

10

Static

static

10

c8b637eead...18.exe

windows7-x64

10

c8b637eead...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8b637eeaddfe983facc0df94d53e970_JaffaCakes118

  • Size

    102KB

  • MD5

    c8b637eeaddfe983facc0df94d53e970

  • SHA1

    5ab247fbd0b37f5fb4a165a76f2f5cea5551f121

  • SHA256

    f8fc32a53ad6f8a2f0a885f5027a486af21313973e8c9e198e308da522918aa6

  • SHA512

    44dc4feed84bd5c25116468e67d272076c9513f51e69b1b9abe9a9c74d2ae67c7d26349731698b1ad57f89c74eca1681c66fb645bc181fa180b4f6f28a9ee6e2

  • SSDEEP

    1536:pBIEgLR6qTo3W74zfsUNkql1euD/qAOOpwz/QTvSc9JEQLkzZfqUkpAj:/I9RssUNdlsFOp6tcHEQkfqUkpAj

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://stareanatiunii.com:8080/pony/gate.php

http://173.83.251.73:8080/pony/gate.php
Attributes
  • payload_url

    http://lojaaliancagospel.com.br/2ACv0vF.exe

    http://sitiodopopay.com.br/pYB0vL.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c8b637eeaddfe983facc0df94d53e970_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections