Extracted

• • Target

    db429aba8f8faf501d1e901c5e55bbe2_JaffaCakes118

  • Size

    91KB

  • MD5

    db429aba8f8faf501d1e901c5e55bbe2

  • SHA1

    8fae69dc7e2dd78c109fbadc8625f225782c7413

  • SHA256

    0386b802cefefc4a93f06a418e7c4ae7b4d0348b03b284fd72eef2371e61d8bc

  • SHA512

    20d7e1e1bbd1658d0393dec2db799ba4c8460358cf7eb872d469c6103250fa92f5480243a96faa56e2eb24382385b5a834cb3b9da4e54c2a3915f44ea61f683a

  • SSDEEP

    1536:ktlCX5pulHFjKZFppjUv4jcJbQd4xj/4wTEd2kgBrGhgnHT5v0I44rZqRnQp:ktY5puleVjaQgVTm2kg9Gg1vOdQp

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2