Extracted

• • Target

    ca6bbb5253012ba303446d548de7fc98_JaffaCakes118

  • Size

    172KB

  • MD5

    ca6bbb5253012ba303446d548de7fc98

  • SHA1

    7900bd01b3a227bae25bad9f06fc08a0cb6438db

  • SHA256

    2f14677147e4cb569f568303d91f1895636fbec9bca17d53512f5726dad1eee0

  • SHA512

    260dc38ff1d273ff690bd83861cfb04a45d9b3eb45dceeb869cd0abec59c013ad1d678d8220362a3c8280c159a0ad5145b8f4ebf08cd5962d2df64c7ff476b70

  • SSDEEP

    3072:PpXwd2bG7/Tg2DmffDrbYHHf3xaW3whYtNYKQe/:KUSTTLmfbHe/haMwNKx

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2