pony | 46ee1d864677de919f65a38605e981d5c0e34d178e4c56c585f203e1b797f778 | Triage

Submit
Reports

Overview

overview

Static

static

5

08645e8b07...18.exe

windows7-x64

08645e8b07...18.exe

windows10-2004-x64

5

Sharing

General

Target

08645e8b0717b42c3622c307adcbbc70_JaffaCakes118
Size

33KB
Sample

241002-cmgagasarl
MD5

08645e8b0717b42c3622c307adcbbc70
SHA1

39bb87cca803a6667030ec90a84d6fb70d06a127
SHA256

46ee1d864677de919f65a38605e981d5c0e34d178e4c56c585f203e1b797f778
SHA512

7396737d1b4fe27b74a6e4a58f7c32e61c20183cb334e1d1f04dc89748198f30a1ae137a3cf224d55f7e85f7e638629b97098a4e9a8f8bf03658ff4460a9f3eb
SSDEEP

768:9ESxTZ9hB8Vsqey5nM2k9qXzPAfIBOiANbXJTg:9RgVsqVzUIIfNbZ8

Score

10^/10

pony discovery persistence rat spyware stealer upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

08645e8b0717b42c3622c307adcbbc70_JaffaCakes118.exe

Resource

win7-20240729-en

pony discovery persistence rat spyware stealer upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

08645e8b0717b42c3622c307adcbbc70_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  08645e8b0717b42c3622c307adcbbc70_JaffaCakes118
- Size
  
  33KB
- MD5
  
  08645e8b0717b42c3622c307adcbbc70
- SHA1
  
  39bb87cca803a6667030ec90a84d6fb70d06a127
- SHA256
  
  46ee1d864677de919f65a38605e981d5c0e34d178e4c56c585f203e1b797f778
- SHA512
  
  7396737d1b4fe27b74a6e4a58f7c32e61c20183cb334e1d1f04dc89748198f30a1ae137a3cf224d55f7e85f7e638629b97098a4e9a8f8bf03658ff4460a9f3eb
- SSDEEP
  
  768:9ESxTZ9hB8Vsqey5nM2k9qXzPAfIBOiANbXJTg:9RgVsqVzUIIfNbZ8
Score

10^/10

pony discovery persistence rat spyware stealer upx
- Pony,Fareit
  Pony is a Remote Access Trojan application that steals information.
  rat spyware stealer pony
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ponydiscoverypersistenceratspywarestealerupx

behavioral2

© 2018-2025

Terms | Privacy