Overview

overview

10

Static

static

10

JaffaCakes...e0.exe

windows7-x64

10

JaffaCakes...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_52bb9e79cec45e40677cd6b665eee1e0

  • Size

    91KB

  • MD5

    52bb9e79cec45e40677cd6b665eee1e0

  • SHA1

    6110e16dce98bce1d35c3334a678234484097f08

  • SHA256

    32952da5248edc057694cd99517bbfb73eed3d5065df850ae7820157ee6b76ef

  • SHA512

    1c372c16404c896c4c069584e066ef7bcad7d1132d65c0705cb6f5e52212ff6909468fad42a44281eb7da020c40d6fe2c79037a9f9e36166632ed8d426834d54

  • SSDEEP

    1536:BXKjAC3lxTzSqTNDhtL/eVgENMYe+vtYfceZuO2wTvxkzbH/5:ZBYlBvr6Mlqt2uO2PH/5

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/ponyb/gate.php

http://talentos.clicken1.com:81/ponyb/gate.php

http://panama.clicken1.com:81/ponyb/gate.php

http://monteazul.clicken1.com:81/ponyb/gate.php
Attributes
  • payload_url

    http://bodyakademie.gesundheitslounge.eu/A6vx.exe

    http://btganjramleelasamiti.com/sTYK.exe

    http://applianceservicecoinc.net/M3PR6LH.exe

    http://globalinfocomgroup.com/unG1h6TS.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_52bb9e79cec45e40677cd6b665eee1e0
    .exe windows:4 windows x86 arch:x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections