Overview

overview

10

Static

static

10

43521fe7e2...18.exe

windows7-x64

10

43521fe7e2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    43521fe7e298387cb484b7d300585fe0_JaffaCakes118

  • Size

    91KB

  • MD5

    43521fe7e298387cb484b7d300585fe0

  • SHA1

    c5339cf04c12608c933692f456e01ed33566430b

  • SHA256

    1f7bb1ff2e407e5332a3942bd581b8ac92ce3c58f93b2e51d648fd32d43d3316

  • SHA512

    355855ae0220f7d6dc5247f40c93b33f0f2a76177db8ca478fa9e661665573418b93f50418689dafbfaaae68bce6c852056244952bbedf737390531d81ed221e

  • SSDEEP

    1536:wlS6eIACR4qTcSw3cfklbWA3TgqikcX5/lUqknKO1cNFTv6kzbh/ySb:il3AoklbU/QKO1Gxh/P

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://prospexleads.com:8080/forum/viewtopic.php

http://phonebillssuck.com:8080/forum/viewtopic.php

http://myimpactblog.com:8080/forum/viewtopic.php

http://yourprospexblog.com:8080/forum/viewtopic.php
Attributes
  • payload_url

    http://dev.cultureslant.com/QPvxH.exe

    http://asromamontrealfanclub.com/JXRguMwo.exe

    http://visualsystem.de/pvG.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43521fe7e298387cb484b7d300585fe0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections