Extracted

• • Target

    f5800863819db8a48d4de7a12b558281_JaffaCakes118

  • Size

    130KB

  • MD5

    f5800863819db8a48d4de7a12b558281

  • SHA1

    b3bc49a44259a824f123b6b7b1123918b421e7d7

  • SHA256

    8a193fd9c132a3870103d139a94da7718c29ef1e72ef02664766926ea4b832fa

  • SHA512

    e0f1ba2ed35941feb5b65cfdc2cbb0af2e3103983ec8bf4c68e7f9d54b6ebbbca3899a64a99411e8312f4b39b8b95abd598f8749e9bbe2be115cf20652604910

  • SSDEEP

    1536:B+L7BtXISH0BVpMNijUJKvRBq2EqIiQmLdhkQOSIIolysxPgC5FKDl0LCK2z0ZKW:gXISOCwjUJ+4zmL0QuIM10aLU0ZKjebL

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2