Overview

overview

10

Static

static

10

17a3c0c054...18.exe

windows7-x64

10

17a3c0c054...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    17a3c0c054a5c4f65f67d1d6f6837b52_JaffaCakes118

  • Size

    89KB

  • MD5

    17a3c0c054a5c4f65f67d1d6f6837b52

  • SHA1

    5df4cc18fbaeb710b7f5a4d4d200011f021bd364

  • SHA256

    e1be4703f24456ecb6beb0cee22ca1ff9b35f360074202f5ac4298a085bdb348

  • SHA512

    20d6618be0091f4cbc6676756129d999ac03a8dbcc2342fba802ef49e01520549f35d66bde01cd507def47f587d06f04a670e001be4ee74142b93097026b5c17

  • SSDEEP

    1536:YgHiXTb9qTk+P/jG6SPK+LYnC34rXx1LGiYnOSXsdhaTvYEKykzmA:3ifdCjGdyqyxBAOfdtEKqA

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://magic-skid.com/gate.php

http://skid.com/path/gate.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17a3c0c054a5c4f65f67d1d6f6837b52_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    17768dcb451276f3d0539455414972b2


    Headers

    Imports

    Sections