Extracted

• • Target

    d18b2d01d6719f7c0ee9305516e55bc8_JaffaCakes118

  • Size

    190KB

  • MD5

    d18b2d01d6719f7c0ee9305516e55bc8

  • SHA1

    e0f3272dc841d0a33e861032762cbf59e80471cc

  • SHA256

    11ea367d90a45796590095405fa028b34837dd6588b1a1be81a22a1ca1aea6e0

  • SHA512

    7f30bca8c949b18eb11a5faaf3cd8af2112141a9278f1863d43c5d1f183451a428fd389b268902e8544ae951f5ebb62a0fb6023c6b71bda0e01d9280ca7830fe

  • SSDEEP

    3072:MLVVLgbRXA43MM+xQTlsHT/gXPaiAqFHFSPoTty9uLM:Umf8RxQTmLpiSPj9uLM

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2