Overview

overview

10

Static

static

10

f8749ec78b...18.exe

windows7-x64

10

f8749ec78b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8749ec78b2d37ff0af0888151fc7e56_JaffaCakes118

  • Size

    89KB

  • MD5

    f8749ec78b2d37ff0af0888151fc7e56

  • SHA1

    8739a78cddafdba1a64e144307397ed7cabbdcb8

  • SHA256

    6f46366d30cba87a81d1141f13fcd2bbbb247256b05f7ac3d722336e3959e110

  • SHA512

    fa80a40adce965135251364462884997fece059f4b883512b5622bb42e6f61447e276561daf3f82a8e38fc0d9f860569368c98b9d7699d92b7bf05bc9cbdf7f8

  • SSDEEP

    1536:wpe3+PMwfqTkl6/AqbFQPm5Z3K8zZti2qnzuCunRubblcwOWUWPTviEuHS54Mmkw:+mxwbQJom5Z3K8zZs2qzHkRuJOWfmEuN

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://89.166.50.40:8080/ponyb/gate.php

http://173.214.223.20:8080/ponyb/gate.php

http://5.newenergygroup.com/ponyb/gate.php

http://5.newenergygroup.net/ponyb/gate.php
Attributes
  • payload_url

    http://www.lichtseminare.at/4F1m.exe

    http://ponnyfreunde.de/0aQy.exe

    http://madridistasanvicente.es/Ms7zY.exe

    http://zockit.eu/3NY.exe

    http://hazimorg.com/3Mu.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8749ec78b2d37ff0af0888151fc7e56_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections