Extracted

• • Target

    cfb3f166fad631de7f9fd29d6ea8a9a4_JaffaCakes118

  • Size

    190KB

  • MD5

    cfb3f166fad631de7f9fd29d6ea8a9a4

  • SHA1

    ae7a57c99e3a82fdf558d66d0df1895e88293d23

  • SHA256

    f628ab60be7620b4e622ac7cd4d3798bce887c10671f3c1ae55cfe37fc396691

  • SHA512

    86fd813291015c0cd2065b2ef8c5c2f845536c71292336d19876e899cbb1a46dac3828398c16515aa80584fe5637e1f5866b892f9b2372c2238074472e6659b4

  • SSDEEP

    3072:uAU3/2j07lUtK79wsr6WJwD+ZzwCj5RcCeoe30Z1:uAmuZw9wsr6WJXxNSo20

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2