Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    JaffaCakes118_6d76d3f3d723628a0914a5acdcccafd0

  • Size

    116KB

  • Sample

    250103-sctqtaspfn

  • MD5

    6d76d3f3d723628a0914a5acdcccafd0

  • SHA1

    7a41e19189b4e2acdf008fa30f94a5832bdc19ee

  • SHA256

    79d19b9c9ea4f29c355c9cfa0915db728c652b34c1c9f14909d64f9d6fb0fd1c

  • SHA512

    7a462c5233269ebb3e0d966cdc0a57cdfbd2cee659612ad4eec1c633700b4adfb50ad9074477192ad2d74d8e9797d74fd2849e73a85b3f9b749061c337dd37ce

  • SSDEEP

    1536:fpJPlHYtmP3w9xatKrk/m9tmvLOLoxzW4AcNQ5FuE3YDKdHxX6Va6KNYp/3Z0oyD:fpJPlRfw9wtukuABytrB6M6jp/+oyD

Malware Config

Extracted

Family

pony

C2

http://waltwhitman150.org/ponyz/gate.php

http://dia-bites.org/ponyz/gate.php

http://dine4diabetes.com/ponyz/gate.php

http://diningfordiabetes.com/ponyz/gate.php

Attributes
  • payload_url

    http://www.acmestore.it/L4cWn.exe

    http://server.autobeschriftung.at/nEjcrEA.exe

    http://test.iboitalia.org/C7oaNwB.exe

Targets

    • Target

      JaffaCakes118_6d76d3f3d723628a0914a5acdcccafd0

    • Size

      116KB

    • MD5

      6d76d3f3d723628a0914a5acdcccafd0

    • SHA1

      7a41e19189b4e2acdf008fa30f94a5832bdc19ee

    • SHA256

      79d19b9c9ea4f29c355c9cfa0915db728c652b34c1c9f14909d64f9d6fb0fd1c

    • SHA512

      7a462c5233269ebb3e0d966cdc0a57cdfbd2cee659612ad4eec1c633700b4adfb50ad9074477192ad2d74d8e9797d74fd2849e73a85b3f9b749061c337dd37ce

    • SSDEEP

      1536:fpJPlHYtmP3w9xatKrk/m9tmvLOLoxzW4AcNQ5FuE3YDKdHxX6Va6KNYp/3Z0oyD:fpJPlRfw9wtukuABytrB6M6jp/+oyD

    • Pony family

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook accounts

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.