Extracted

• • Target

    d2592d088f7f697aadff7badacc67976_JaffaCakes118

  • Size

    178KB

  • MD5

    d2592d088f7f697aadff7badacc67976

  • SHA1

    92017e26eaecfa7f31bb6ba04017fa80628d06a1

  • SHA256

    73349b7e4fb3760dbfa299708d1d40d0bd76a42640fa6e539d88c266f6a1782e

  • SHA512

    dadb88ddbef605f12cff615c2160fc05a8048c7b89db45582ad06c712c743b5a6142f1e276bd9147c80abb46fddfe0b0416b1932cfb1977bc6c4bc1fab7a7e98

  • SSDEEP

    3072:/Q3/nGv6XSIk/44xD5aoMaTvR5UAtri+HD:IvnGv6XSIk/4C5aVasb+j

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2