Overview

overview

10

Static

static

10

ed0036f868...18.exe

windows7-x64

10

ed0036f868...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed0036f868579f563c22d677ad8f02c1_JaffaCakes118

  • Size

    89KB

  • MD5

    ed0036f868579f563c22d677ad8f02c1

  • SHA1

    96e5e2394acc6cc874c83bcfbabf6666acd0b27f

  • SHA256

    fa70f66ded43fc42ee50313ef419a38caed79a0e022fd581f72dd54e647cf859

  • SHA512

    59b57d1c9288c78cb92a56701196f2e7b2f0fd64a116b833bb0f3483f6d2774cd7a2598bc0c28af5bd07c64d113b6fb03676fd6b402807e5c877a30934426e83

  • SSDEEP

    1536:XTkO+qVsqTI8sYPFoGkylvwfI3IyufthA2IOFLTannTvlEwpkzZg:jkRG00kylofI4yiYOFaJEwig

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://93.190.142.120/ffdsasdfsd/gate.php

Attributes
  • payload_url

    http://pontwo.tk/spsp/t1.exe

    http://pontwo.tk/spsp/t2.exe

    http://pontwo.tk/spsp/t3.exe

    http://pontwo.tk/spsp/t4.exe

    http://ponone.tk/spsp/t5.exe

    http://ponone.tk/spsp/t6.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ed0036f868579f563c22d677ad8f02c1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    bdced6a3f30427fe49c014a661281b15


    Headers

    Imports

    Sections