Extracted

• • Target

    f6c6c6fb27e70071f8f5af0b6de1c859_JaffaCakes118

  • Size

    188KB

  • MD5

    f6c6c6fb27e70071f8f5af0b6de1c859

  • SHA1

    eb043a8e46ec227d61dc56719bfcd680cd623b4d

  • SHA256

    fd75f866a78b69d5c881dc93d83b876c5034c59afc08cf6062369be8e99e7985

  • SHA512

    09ffe30f84d493f717baac9fae224153de48adcd37fb697ac49aaf5bd443236b8c7770a4b0847df428730ef057ab20556c6cc3c140c781e434302f2a3c7ea9b2

  • SSDEEP

    3072:KRMUTS+R5M0zKzivJXa9xMVPb00cMDNIdEnoQH30TX:KOU++R5z8Y1a7Kz00cXdEowA

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2