Extracted

• • Target

    d4ec8bebca49a5535dbaf5900086a2e6_JaffaCakes118

  • Size

    159KB

  • MD5

    d4ec8bebca49a5535dbaf5900086a2e6

  • SHA1

    eb83edf2cb4aff8b5b098b74121802e03ffe2658

  • SHA256

    ac0d4f801a490e442386ecdb3c00cba160c1aa00c8221635c3ba701630b35393

  • SHA512

    758fc5c7d61d012531b8ebd29dc4263a80bceaf4def10485633a568ff56d5883a9421071529a0daa7a67bdc835e181a8694f2c17af599dfb47b6fc66bf72b0b5

  • SSDEEP

    1536:3KPE04qUQQtZVX17C8Wu2FpVxEnSf4ShBXK6SM1Ihr4NIO2Sp/cAO7dRb8lvEB6n:3h04qNkVXC/f+IF0CIhr4NIO2S9AqS6n

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2