Extracted

• • Target

    df1b2e4bd77c3d427190e7cd17a0dd1a_JaffaCakes118

  • Size

    148KB

  • MD5

    df1b2e4bd77c3d427190e7cd17a0dd1a

  • SHA1

    d1fafae0620d52382c3bd23c6d102c72020d6fa4

  • SHA256

    e7c4df0ff87a4d1cf68c59111c0e7bd0f38f4f5d08373bc4454a8dd7861c2225

  • SHA512

    f2832664d24d88466028405205be59bbe3ecf27908bac8fbd1e8627e69ac61c58b63f48113c182655efc8dd1821163c46fc4ee0dfce362e549e3b282ff626c13

  • SSDEEP

    3072:cDL1FYb4QvUYofRYTVKmAAdQyuTFslBgpbX/PTNk:6pSeRQVKqdQyucKe

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2