Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ec26d06808b44a7314d59ceeccc0ad76_JaffaCakes118

  • Size

    216KB

  • MD5

    ec26d06808b44a7314d59ceeccc0ad76

  • SHA1

    9a8a2c138834f2c487704b187c751d6dcfa7db29

  • SHA256

    cc62022d24c59607f4e9cc6d1f22fa247617a9b191de2397ded7f2155c273f7e

  • SHA512

    ebcf9330174a664f9a1544d77b5530c13d4bef90cbed6a52887b0494cbede3325b9bbea4252be2216a36e55d42dd9658d77ba2b69a85456971a4134d0ff75076

  • SSDEEP

    3072:xURig3D6G8BNd8JRvtpGdKApSX2uWKppGjswSnMuGc/CfZDap6COU45EIPtm+:83qVIGdKApSX2uNj1wSnMuGc2EjObm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://mitsumidistrlbution.com/maroke1/gate.php

Attributes
  • payload_url

    http://mitsumidistrlbution.com/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ec26d06808b44a7314d59ceeccc0ad76_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    476f92c8f9ddbcb805cdc5c61fbc5635


    Headers

    Imports

    Sections