Extracted

• • Target

    e9a99a40ca4c1009fccff8ac9d8d8565_JaffaCakes118

  • Size

    130KB

  • MD5

    e9a99a40ca4c1009fccff8ac9d8d8565

  • SHA1

    023c0895a7bbfa38d09c0db0dfc50abf1d52b3d4

  • SHA256

    3cd291436b3f4c8797e0569010f58fa60bfb64b09b91a11417af103a7901b20c

  • SHA512

    08bd2e0ff0f6e7ddfb2db73e6c09114256bda42fb0e05c7f97ac3f1d40437936044b3490939b5871716b9b1ed74198514cfd804dd60735b601ae3401bbbb3f58

  • SSDEEP

    3072:N6soD+rIVF8MTLWsjUf+C+e1Da0DKMeGQ:N5J0VFNTY+gDK0Q

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2