Extracted

• • Target

    5a5142fdfb4fa573bc50ee5a20553072_JaffaCakes118

  • Size

    146KB

  • MD5

    5a5142fdfb4fa573bc50ee5a20553072

  • SHA1

    ad117e531446b5e44c2dcf051cd470ef9ceb1a5a

  • SHA256

    80066bd3758b5df31ccc26a379303cbd4de9bb6db0a8327b64729effb1fa7a5f

  • SHA512

    36c7e12f406ef7c0eb44ae29026607891d327e12fcd4d591bf67cf5972b0c0533624b156840e3b21e9124967f5c905bd0e53d3e637a07178144b416c00831aa7

  • SSDEEP

    3072:m0NkEiOrKc6lhaMz+Ct9n7qukvrkVcWcyy8:mUBOPZ97qTvrPL

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2