Overview

overview

10

Static

static

10

cc72e02e5e...18.exe

windows7-x64

10

cc72e02e5e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc72e02e5eb10a636d971f9e53d24450_JaffaCakes118

  • Size

    91KB

  • MD5

    cc72e02e5eb10a636d971f9e53d24450

  • SHA1

    39d88a8a946947542d532b43d5f14e70ee7ac848

  • SHA256

    0b76a9ca4a7dc182f33a73ca74b98938dbae99bf9ed0439f5f236c414e5ffc85

  • SHA512

    1ca05fbd539003c18639688f444bc20fdd923278ab7c0da7ece2e6d36f5d9f8afd933f23378642c4e92b3eac94f11b404b65c32193851458cce7431a1bf9397f

  • SSDEEP

    1536:r0Q89eYqqTn2Nnb6omC4rTqdPzpGSRuCscRaquHmjlBO+IkETvKEKLkzmj9:QiY+2o6rTqdPzpGSDrRaaBOhmEKzZ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/forum/viewtopic.php

http://siteseoguide.com:8080/forum/viewtopic.php

http://uksonlinedating.com:8080/forum/viewtopic.php

http://199.59.56.105:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://dinodel.de/as0vC.exe

    http://www.mssdatamasters.com/U2iuT.exe

    http://www.jwenba.de/X6HF4.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc72e02e5eb10a636d971f9e53d24450_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections