Extracted

• • Target

    4b3bf3bb4901a86af871509c66e086f8_JaffaCakes118

  • Size

    147KB

  • MD5

    4b3bf3bb4901a86af871509c66e086f8

  • SHA1

    e9296a9198475ccd184ce5c75379d20434a478c2

  • SHA256

    0a0e43f612b9fc8b8f6361f6c359c6fda9b108f314cf2ac37edcafe1b8f4839f

  • SHA512

    24d56821ff57cea7e8f33bdbdb9b6bee5e0d8d5a4ae9b7d92ebf787875897a9f0012ad8a39756eb02aa0973997b449cc425034e566f37d662e55f3f6eb0f78f2

  • SSDEEP

    3072:0T1xYQbDsCw7SGd3nNgOLpla6NZQJujb2ltgp+/PTNF:0RwGGdnNnla6NZQJu4Xr

  Score

  10^/10

  ponydiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2