Extracted

• • Target

    f2f4ded6ea37e0adba54e4b673a02634_JaffaCakes118

  • Size

    150KB

  • MD5

    f2f4ded6ea37e0adba54e4b673a02634

  • SHA1

    370e5785d3315873db8dc4c75957b495318a25eb

  • SHA256

    82ed66f1af26a379a716dd9977e49603b8634c76585d571d47693b411aacf207

  • SHA512

    5d36cf619ade0dc5759cb1ea23b1e0d3fbb1ff04c001dc1705c78c072d6da455e2a21efda69062ea2842b32ec56fdb3cbc2344817f65cd565b5d1f483f71a0a5

  • SSDEEP

    3072:YtbUWKTFHAN8WibywwgMOhJSqby3sZm3VG6uNl:YtnKTt9UsZmFG6ql

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2