Overview

overview

10

Static

static

10

a6c8df4646...18.exe

windows7-x64

10

a6c8df4646...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6c8df4646f209dc078e12082a76420e_JaffaCakes118

  • Size

    91KB

  • MD5

    a6c8df4646f209dc078e12082a76420e

  • SHA1

    7db66aadb725fbca35a0d013c75b1e9ed0725516

  • SHA256

    7456876d22bdf61a339f46763c716f961bf16cb174932d7ab0430792fc2661b2

  • SHA512

    51172271ff14920b096517c4fafe055ae0cbc61db5573c9af1a234d0f21249beca2693d61fb9a80a895f7cd4c94e71c93b38c6b34fb5ec2b217407f7dab98368

  • SSDEEP

    1536:6VgWOS48T4qT7YxOkTL8Qx6eLOFxwJzucehrOpcXTvYkzbO/u:0Xl4Bx9TLVx6WywArOpmO/u

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://alabamaenergysuppliers.com/forum/viewtopic.php

http://arizonaenergysuppliers.com/forum/viewtopic.php

http://b-markenergy.com/forum/viewtopic.php

http://bemarkenergy.com/forum/viewtopic.php
Attributes
  • payload_url

    http://masterprinters.com/fp2uRK.exe

    http://marwall.com/zw0cZs3s.exe

    http://israelilinks.com/zzta.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a6c8df4646f209dc078e12082a76420e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections