Overview

overview

10

Static

static

10

df7debc773...18.exe

windows7-x64

10

df7debc773...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df7debc77391737b2a0e0da35c545ac5_JaffaCakes118

  • Size

    31KB

  • MD5

    df7debc77391737b2a0e0da35c545ac5

  • SHA1

    d436a5dd8031160cab3579cbd9d8dd78a09d0710

  • SHA256

    caf94a7b7b321b8d89d6b524ba59b75c82057f5f59296f90fa171b9c41b28705

  • SHA512

    b6caea208b3de01d91fe21f00c6525b388cf764aaf997b9a71d68e337c5966006d013cbf55118c2f32d0a3b261248798e91324eb6783b3b30707e73dfb30c031

  • SSDEEP

    768:xBQC4JhAMeNDX81pQZjUIdY2L67AI07Z3eUl0Tw:BmhAMeNjAcgw+kI07YUl0T

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://WWWW.ACEBPSK9.COM/vepof83/gw3t3s.php

Attributes
  • payload_url

    http://tisdale.us/pd.exe

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • df7debc77391737b2a0e0da35c545ac5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections