Overview

overview

10

Static

static

10

e9bbc54e10...18.exe

windows7-x64

10

e9bbc54e10...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9bbc54e10c6b897b483bf57c3dda900_JaffaCakes118

  • Size

    88KB

  • MD5

    e9bbc54e10c6b897b483bf57c3dda900

  • SHA1

    54698590253a4d04aad1cf8c02d484be0415c0d2

  • SHA256

    25f7ebbb022f591dc9bf03af03aee6c7be90e13d7ec4b4332e4ddb111e0bcd00

  • SHA512

    ec050e78ccdd4aec366061d239e9a60b7f60585d2ec7104bbfba273dba6ac26fd8658d18df2b3306d259c2015d113f56b0181b3d8128d476ca61861f03a5a885

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIv5kzZ3:9dOy+ubiDBzv+1H4OgYEIK3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://myownradar.com/default.php?qQnDbZDsATrHY2MfPPtrYpVHQYyGyZIsZ8QrD

http://snapz.com/default.php?meSqRJuII3rF7GyrJbQFiAIAwac6247Q6ANdwrEClj

http://mijardinzen.com/default.php?sBY5qdtcWdvAlNDSdHH8GGgsQbwTYULiZBSQ

http://troopersofcolchester.co.uk/default.php?xysZuuGvhljF2yfrXTuDvJI5C

http://fdg.bplaced.net/default.php?HPrAIlXZeIECCqj7KGTyWKKW9DCNbF9a48P4

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e9bbc54e10c6b897b483bf57c3dda900_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections