Extracted

• • Target

    dc163f764ca7cb63ee07c325ffa05634_JaffaCakes118

  • Size

    192KB

  • MD5

    dc163f764ca7cb63ee07c325ffa05634

  • SHA1

    82003260f9766cb30193cf7b5bc80d2e1176972e

  • SHA256

    baef5e9287a54c29a290e7b9a3ef3d422a91a717198a9ec6b81b1274b3683803

  • SHA512

    383c1882e09dff094f5ec9557798c56721829f8844a44b0c66be932ca4daf91deeb6bbfdb260b7bdc36103766a9e6ae2efcd4806d398cd14348ed9fd31f517eb

  • SSDEEP

    1536:5f7hBPHgaHDjMplPtT/wB/06fdUsx80VuXBn+ahqhDkATs6cE7sWIaM1VTcUPgny:N9BHgaH2lZI0Bsx6B+ahC7w6cEOVTdQy

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2