Extracted

• • Target

    e99ddf47bad2de79b7e7dea28b4d423e_JaffaCakes118

  • Size

    172KB

  • MD5

    e99ddf47bad2de79b7e7dea28b4d423e

  • SHA1

    15f6368c200a67d9bb6548bfa8fca4bdb8dedff0

  • SHA256

    4d6ad5f4bad803fa7acfe8c6a88b25103c179c16afd26489a9ed064f0b1d6f2c

  • SHA512

    34cda1c6e56c11cd0b22d1f2e2fb2c8db0eb74f1768e337035a7f229a8a34c2cd548aa8411b418c1f09f6ab8bb250d3d06efc09bb532f9f7a9e267c4c4287e58

  • SSDEEP

    1536:o8lvp4ihukLNjO7pLOrH9muLQ5iSXj/YUpmYBb+kFeHn9Az:dldzNSLqQuc57/YUpmYBb+kF

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2