Extracted

• • Target

    ebed485b42c0524c09fc9a6b63ed6d17_JaffaCakes118

  • Size

    121KB

  • MD5

    ebed485b42c0524c09fc9a6b63ed6d17

  • SHA1

    ae7ab009bdf62acd8cbe4661839c45bae847436a

  • SHA256

    cadf58a40041cdbdac68b02e259d45310985ae8b236ce04211da5316d108094d

  • SHA512

    715900554fa4e73fe66bbd09bb2955072da57ba50a789caff27d2fb502fef7709297a5065687941e02c6cfb6efce78a9bc4fc07ef5c1baff62dd3aa2b7463296

  • SSDEEP

    3072:kQSkOYWUb7pYrlBnqn387MW3ytmk5KMUOK/Ye7:3SkOra1YRBq3QRCEu4OKd

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2