Extracted

• • Target

    e3172834b20898b8a25184c3bd0948ed_JaffaCakes118

  • Size

    93KB

  • MD5

    e3172834b20898b8a25184c3bd0948ed

  • SHA1

    a86227c1630d54dfe059e9a71df1299c1566a146

  • SHA256

    78da25e1780ea1efc42205ff601cd73dee0075ab4f3c58c59387cce8719c46dd

  • SHA512

    f31077dde00e8924aa3f53125eb0a884a5c35251b41c5c38d1b27ba64bc4b99cc41d953eacf62db11cac8950273698538d4ac570633a784ebc2a17cbbacf9a82

  • SSDEEP

    1536:luZQ4OaD0uIwaq7M4KoQuURcKc2sXTc3+yA7TNeNQ5BAkdlFKT17s:Q967wf7M4KoQukcRXTaH8TNv0kZKTBs

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2