Overview

overview

10

Static

static

3

e1f16e62f2...18.exe

windows7-x64

10

e1f16e62f2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1f16e62f25c0f380cd2958132c75659_JaffaCakes118

  • Size

    128KB

  • Sample

    241211-r43x5axjat

  • MD5

    e1f16e62f25c0f380cd2958132c75659

  • SHA1

    a385f5f765dec63a8ec79bb54d27ac891fa90775

  • SHA256

    8291929f38871302f8a28f2bf485857fc97908d4fc82832faa183076c34451e8

  • SHA512

    4e456bd7dc47960818bdf27a60bf9f7985bb01d823795afc9a6144cb7e135bd409796acba7b22ee190de9b813eb5aba2a9dad9ceb917019bb95352d756c3768b

  • SSDEEP

    3072:uGHi6mwlZJ8iSUUdy2H+6KTwX6P7PTvhIcly:+uZZSUUdy2OwXGTvj

Score
10/10
ponydiscoveryratspywarestealer

Malware Config

Extracted

Family

pony

C2

http://67.215.225.205:8080/forum/viewtopic.php

http://69.194.193.134/forum/viewtopic.php
Attributes
  • payload_url

    http://fuerzav.vectorialstudios.com/4Gxf.exe

    http://riegotec.com.mx/fgGq.exe

    http://modaitaliaclub.com/LdKtM6.exe

    http://successwithmichael.com/Dj8vftG.exe

    http://piscinasangra.com/oP3yge.exe

    http://p933.phpnet.org/0uVk8W2Z.exe

Targets

    • Target

      e1f16e62f25c0f380cd2958132c75659_JaffaCakes118

    • Size

      128KB

    • MD5

      e1f16e62f25c0f380cd2958132c75659

    • SHA1

      a385f5f765dec63a8ec79bb54d27ac891fa90775

    • SHA256

      8291929f38871302f8a28f2bf485857fc97908d4fc82832faa183076c34451e8

    • SHA512

      4e456bd7dc47960818bdf27a60bf9f7985bb01d823795afc9a6144cb7e135bd409796acba7b22ee190de9b813eb5aba2a9dad9ceb917019bb95352d756c3768b

    • SSDEEP

      3072:uGHi6mwlZJ8iSUUdy2H+6KTwX6P7PTvhIcly:+uZZSUUdy2OwXGTvj

    Score
    10/10
    ponydiscoveryratspywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks