Overview

overview

10

Static

static

10

e7fbeeb79c...18.exe

windows7-x64

10

e7fbeeb79c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7fbeeb79c57531d2368cfa0342adf6c_JaffaCakes118

  • Size

    90KB

  • MD5

    e7fbeeb79c57531d2368cfa0342adf6c

  • SHA1

    3020c9ee8e65aa3741dd66971dd67553e13269f3

  • SHA256

    0301a820a1671d1a9372effc2c926b3676ce15b0675ab745916dea11ff4e7a34

  • SHA512

    297a38abf3eab1d874acd09c0a5c4544b67ec86f8ef477a897d7bfee66d627a1f5bbba481c2de859684386251003adb4b957f15745271f6ae9e32fd1b9600536

  • SSDEEP

    1536:tLCH2jfXqTxt7nnt2uKt7ZR27jRAUFvOCZkTv+E7WBkzmLQ:dCHSwnt2uKt72/tOWE6dLQ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://www.bing.com/gate.php

http://pages.ebay.com/gate.php

http://ngnetworld.com/gate.php

http://wordpress.com/gate.php

http://simple-cdn-node.com/gate.php

http://www.microsoft.com/gate.php

http://ngnetworld.com/1.exe?c=4
Attributes
  • payload_url

    http://ngnetworld.com/6.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e7fbeeb79c57531d2368cfa0342adf6c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections