Overview

overview

10

Static

static

10

e8906c5b13...18.exe

windows7-x64

10

e8906c5b13...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8906c5b13a46190c0b8dd48fbad50ec_JaffaCakes118

  • Size

    103KB

  • MD5

    e8906c5b13a46190c0b8dd48fbad50ec

  • SHA1

    f91d749a32153e4b7df2eade68f835530fe782df

  • SHA256

    ab56b7455c3bc3ebef7932d0c49ac358e863de43f0766912389a87cae0b6103a

  • SHA512

    4eb492eeefd413edd8719987b2bea2c9e54b3148844efecbf8f1343d4a9ce593b5db99e565c503d72aabb4c2d6b5bd4c86417a86091068546de7ade0084c8403

  • SSDEEP

    1536:ZVuUw99IxqTHWc2qg43eGfpazd4OfupBgWCOhAYRpTvMEIdkzZhwMhw:Tuvfg43eGfpyd4kBOhIEIehwp

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://182.23.41.20:8080/pony/gate.php

http://108.178.59.15/pony/gate.php
Attributes
  • payload_url

    http://www.artevoz.com.br/9D0JP.exe

    http://costabrasileira.com.br/JcLHb3DA.exe

    http://secretulmeu.eu/eozgC.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e8906c5b13a46190c0b8dd48fbad50ec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections