Extracted

• • Target

    c98932647f806c43fe67dc9346c0f2d8_JaffaCakes118

  • Size

    93KB

  • MD5

    c98932647f806c43fe67dc9346c0f2d8

  • SHA1

    522ec786ef0f2af61d19b4a7d50e4e06d3be1a00

  • SHA256

    deb6a51ead38357485f09f80f349318c8bdb5f6446cb24b58a24f4b6f61c55b2

  • SHA512

    c0f750aebb7a961c7e27bf9128308f229f77db3b5e9ed175dbc594cdc8900d3bf056d2a7ce939ed781ead924022f89fa240fbfc9b2c03c0e4a4bab3e46648099

  • SSDEEP

    1536:2HWBIB5XieYBmKKRQ64mgI/RHP7LXoE0AIJA7TNedCQwvgb1W7GjdWha:ACIuXBmLRQ6ZgI5HPQEl28TNuPwvgc1g

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2