Overview

overview

10

Static

static

1

9f04a4f971...18.exe

windows7-x64

10

9f04a4f971...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f04a4f97120eef5ee1d6965a4f25767_JaffaCakes118

  • Size

    137KB

  • Sample

    241126-bp9jcstjfr

  • MD5

    9f04a4f97120eef5ee1d6965a4f25767

  • SHA1

    3261427e70f62c7d1f4c9109b9cfa47337f30bce

  • SHA256

    d664d6c3ab65cae6b2799b101469dc03cdc03a0a0bdd53dc6d41b1c417c08f81

  • SHA512

    75d1de3bb059c85c4b3d830283b32330049630f4aaba249aa1d8b1d2dcff39eda2f47b7ce09c92cf0b5bb60bef725ac30c048601efe54101a6b07691b373119b

  • SSDEEP

    3072:NyLhtUlHAnBYOEHEbAuqAwI80WMbKLfLlZh/2U:NOUlgnaBEczr0aLDN/1

Score
10/10
ponydiscoveryratspywarestealer

Malware Config

Extracted

Family

pony

C2

http://www.alberghi.com:8080/pony/gate.php

http://buyandsmile.atomclick.co:8080/pony/gate.php
Attributes
  • payload_url

    http://ftp.eburneenne.com/7zBY7xS.exe

    http://www.spetter.com/mi19YgV.exe

    http://photosfoto.com/uTM.exe

    http://www.daginternacional.com/trXe.exe

Targets

    • Target

      9f04a4f97120eef5ee1d6965a4f25767_JaffaCakes118

    • Size

      137KB

    • MD5

      9f04a4f97120eef5ee1d6965a4f25767

    • SHA1

      3261427e70f62c7d1f4c9109b9cfa47337f30bce

    • SHA256

      d664d6c3ab65cae6b2799b101469dc03cdc03a0a0bdd53dc6d41b1c417c08f81

    • SHA512

      75d1de3bb059c85c4b3d830283b32330049630f4aaba249aa1d8b1d2dcff39eda2f47b7ce09c92cf0b5bb60bef725ac30c048601efe54101a6b07691b373119b

    • SSDEEP

      3072:NyLhtUlHAnBYOEHEbAuqAwI80WMbKLfLlZh/2U:NOUlgnaBEczr0aLDN/1

    Score
    10/10
    ponydiscoveryratspywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks