Extracted

• • Target

    383bc96b391514b8a95e2b28c9cbcae8_JaffaCakes118

  • Size

    147KB

  • MD5

    383bc96b391514b8a95e2b28c9cbcae8

  • SHA1

    001f44e01e737d141ee9e11622c2a9bbc56655eb

  • SHA256

    2266edec4f5b76f846a9e3db09c0f0ea9f11b2278ea7f7bc44d1786fcee069e7

  • SHA512

    b422c5cb0be2871e8c2c1bf20d2d53d0fcd7d4bfe487bd35f90a96500236496efa3a352e5b5bacde778c79287f8db586ff35a5765cf9f6b81860d150a372157f

  • SSDEEP

    3072:ty1xYQbDsCw7SGd3nNgOLpla6NZQJujb2ltgpH/PTNy:tmwGGdnNnla6NZQJu4yE

  Score

  10^/10

  ponydiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2