Extracted

• • Target

    e990932045c765843050471ab6df99c7_JaffaCakes118

  • Size

    89KB

  • MD5

    e990932045c765843050471ab6df99c7

  • SHA1

    0f1cddecd072acc10b4654d93c804d6c91d7faa1

  • SHA256

    36faac9acfacdd3d53d24e839122e29e9b59c81eddd72ed66df3513d4f633843

  • SHA512

    97971d6b14517bb6ef71357be5a19380fb88dbdca5bdaeb35a0fa5fa9c5c9c83e6d33194bb66c91cc06472e2fb32aadc23e5f789af3885af3010156bded3ceb5

  • SSDEEP

    1536:ypEcw/YqTHYqgggiAhV4xN9buQUvjLmMmOh4epTvMEI+kzZD:EEJfxAhVSNxbUv6OhiEIxD

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2