Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fa85742565...18.exe

windows7-x64

10

fa85742565...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa85742565728498a77a390d2950df16_JaffaCakes118

  • Size

    89KB

  • MD5

    fa85742565728498a77a390d2950df16

  • SHA1

    d2af2993dc02f40a145be6caefb65d15472198e8

  • SHA256

    5ee6ca679acd76f04ba4636c5b5107fc2452bf0f6674718c232883ea8f97338d

  • SHA512

    7df443e203250dfb10b61693a44ce21996276733a69980247341d6ffc94869cefc7c1020ce8d3257b752c2f96c9ad257ed3aeb35361391670519dcbe907e9469

  • SSDEEP

    1536:Sj13U/NXBqTkOvIij/Dz997YRAmuly348vceN2O+MDcTvKECckzZt:i9uX5Gj/Dz9lYRP53IO+CTEC/t

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://br1.irontrial.com:8080/ponyb/gate.php

http://br1.pineapplesdonthavesleeves.com:8080/ponyb/gate.php

http://89.166.50.40:8080/ponyb/gate.php

http://6.creepyassstuff.com/ponyb/gate.php
Attributes
  • payload_url

    http://doorway.co/eRY0kp.exe

    http://actia.pl/FcNa.exe

    http://k2steel.com/iCq7.exe

    http://aktibbicihazlar.com/ttya.exe

    http://assulapia.com/cAvbh.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fa85742565728498a77a390d2950df16_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.