Overview

overview

10

Static

static

10

ee29b887eb...18.exe

windows7-x64

10

ee29b887eb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee29b887ebd59aeb23823adfc6e0d867_JaffaCakes118

  • Size

    103KB

  • MD5

    ee29b887ebd59aeb23823adfc6e0d867

  • SHA1

    7e39dee774d3f705d7acefb5318e0b5af602641d

  • SHA256

    82fdbb556b931404318c54f2ae248797c33fde6ebf23fabc0ba75dc0eff43c71

  • SHA512

    c6cf7eb67419ec807f249c6b06ff39c44880204aaa0122e59dc18323f83496a24cdb674d41e354336728e4d07c8c9edc005829b315ddddb1b5d6ce2e417537fb

  • SSDEEP

    1536:nDTi4mJqTHvzWPk5+/RxEvaGmuVE3YpZMOjMnQTvYEQhkzZPwMhw:DTq7k5+/RivbmCETOjgEQKPwp

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://182.23.41.20:8080/pony/gate.php

http://108.178.59.15/pony/gate.php
Attributes
  • payload_url

    http://bellaprobeauty.com/TUZCpyj.exe

    http://safarietplatinium.com.ve/NRs3pZfy.exe

    http://freegermanpornsex.com/YiHVUjb.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ee29b887ebd59aeb23823adfc6e0d867_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections