Overview

overview

10

Static

static

10

f7ef690b66...18.exe

windows7-x64

10

f7ef690b66...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7ef690b66cafaa2b0296a6d35ddbed7_JaffaCakes118

  • Size

    99KB

  • MD5

    f7ef690b66cafaa2b0296a6d35ddbed7

  • SHA1

    377e2985b959f8e0305236adb1542933e754804f

  • SHA256

    424a86bb57bfbfd35e536a5fe76ae7196b90490bba0b457d4e012be8340b9ec7

  • SHA512

    c57fd9c8604c2ee4e277d7f9df79eb93d09400c99a29b6fe2207915bdaa8fb21428658fa17c3ccc349ad5ef13530d8ff112e37c2f42fc07825992bc871221ac2

  • SSDEEP

    1536:e/02WusPqLqTL4UDAdk36l7rMFBtHq38kfPPODefXOCcTv5/Qkzb5vJ/S:W3RsPOS3E7rMF/6FOD4JsVhJ/S

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://myetherwallet.kl.com.ua/1/web/gate.php

http://myetherwallet.kl.com.ua/1/web/path/gate.php
Attributes
  • payload_url

    http://disk.karelia.pro/0W5vZoi/svchost16.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7ef690b66cafaa2b0296a6d35ddbed7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    912d33eb4255fa5b29622fc415dcdbae


    Headers

    Imports

    Sections