Overview

overview

10

Static

static

10

e990932045...18.exe

windows7-x64

10

e990932045...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e990932045c765843050471ab6df99c7_JaffaCakes118

  • Size

    89KB

  • MD5

    e990932045c765843050471ab6df99c7

  • SHA1

    0f1cddecd072acc10b4654d93c804d6c91d7faa1

  • SHA256

    36faac9acfacdd3d53d24e839122e29e9b59c81eddd72ed66df3513d4f633843

  • SHA512

    97971d6b14517bb6ef71357be5a19380fb88dbdca5bdaeb35a0fa5fa9c5c9c83e6d33194bb66c91cc06472e2fb32aadc23e5f789af3885af3010156bded3ceb5

  • SSDEEP

    1536:ypEcw/YqTHYqgggiAhV4xN9buQUvjLmMmOh4epTvMEI+kzZD:EEJfxAhVSNxbUv6OhiEIxD

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://74.53.97.67:8080/forum/viewtopic.php

http://74.53.97.68:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://ipsiamarcora.it/AaHKuBDo.exe

    http://www.ncga.org/toK.exe

    http://elenganche.com/rLSGvsmr.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e990932045c765843050471ab6df99c7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections