Extracted

• • Target

    f002ec64baf07c4c7a413b5024a771d2_JaffaCakes118

  • Size

    139KB

  • MD5

    f002ec64baf07c4c7a413b5024a771d2

  • SHA1

    94bbe4f637d949065e9235f14efcdb1146a4873c

  • SHA256

    38a627c136e3c2d213c6c6fec3083ca04b26e941eb4913953d43f04249ad3d32

  • SHA512

    328797190b6680a957787869310b086b53f6725b044d3e56a90ad70d2dffb1d00d2e1bc351e82996ee0af8e95a2af28ec257a649b53147b514b99a810b3f6721

  • SSDEEP

    3072:MXr0J+WEsBSRcJ1Jo7Kgi03A0akV+UAManLDlGjQz9uL6:aIJ+WBBSRcJ1JNgi6AUX5an1Gjs9uL6

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2