Extracted

• • Target

    d8d57ee2190107bbdbbb04465cc20420_JaffaCakes118

  • Size

    93KB

  • MD5

    d8d57ee2190107bbdbbb04465cc20420

  • SHA1

    39bdccf4addbd3a0cdb093b7bc3f5a1289da35e7

  • SHA256

    b3343227f5d40287d12d858698ab620c2f84218694d7b36d754ff4c3303d182e

  • SHA512

    0b3437163d711292b4bc676466ca27d0167594b339fdbfde36b6b563431c73c496b50f01d1fb58316f9addab97f18045cb729539f4f463235f81d0743c93b556

  • SSDEEP

    1536:UmJ2NElU7yibm20iE5ORAt6APFvIvx/Yf5A7TNeSQfVWkf7Vx5cqXnY57:/0XWym20iE5CI5Qvxwx8TNqYmVn/Y57

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2