Extracted

• • Target

    f809466dac29099fb12112a776b90803_JaffaCakes118

  • Size

    91KB

  • MD5

    f809466dac29099fb12112a776b90803

  • SHA1

    e199b2e62780b74d95e1dbe1fcc0a2c255016bf4

  • SHA256

    dc33f89e96935d60a01c60f6b6d5abf1f6ee6a8d6f2c545a173460af24586365

  • SHA512

    320a7a78d8f274a9411b9107548bc1ca3f402225ea79e803f3bfb7dfb0cb14ee21c33261c62b1996946f3991468b04ff43c9d3ca715431d1cf17b96294e854e3

  • SSDEEP

    1536:utDT65pgFbwURPw6lgrT63ndnuoVHA/rLoFh/sJ9nL4az/SKyNMlGaGTitg8nQx:utK5pQRNa4ta//oFRKHDSNMDGUgoQx

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2