Extracted

• • Target

    d8c0d62d455abe5537afe005b8d7373a_JaffaCakes118

  • Size

    172KB

  • MD5

    d8c0d62d455abe5537afe005b8d7373a

  • SHA1

    772cc3a5197462131f7f12c869983493dd8de06d

  • SHA256

    61fb14b22121107c7b646f4215a7d30e875d34d2d65f160f042a85b32f01d381

  • SHA512

    78221b2270f4b3d82f0b0d5db6e1c151b5d893d5bd84a35f6f97ea986e4d846497f867b50043f58ac5aef92009cde315aa3c5ceaa1a90ba7d04c81bddb6aa526

  • SSDEEP

    3072:0pXwL+ba7/P4Lhjn6hgkjfQf3vqyW3Gbh0lXUKQeu:jaOTPcheiaqfqyM2kUK0

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2