Extracted

• • Target

    d010f7753728d50ed9db5f7d0157cfcc_JaffaCakes118

  • Size

    188KB

  • MD5

    d010f7753728d50ed9db5f7d0157cfcc

  • SHA1

    3718a04bc30a1adb0f207f43f581dd10b57c02da

  • SHA256

    d486cb18af98ca2939fc054dc4f9b24bdd657918f59b4087a7b7f00d18bd8cd9

  • SHA512

    c66f8fc60d16073206aee8131ac744e2d49ce9e42f6d19d8e48117ebd71969c12bf60c3e4e84d06553410645ea4a3eaa667bce5b2f8cb4f4627d3c3b17ab4673

  • SSDEEP

    3072:NRO2tlzADOxKcTHwGTCVVPbSMVoCHnroH308Z:N8wlzTzTwGmTzNoAroB

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2