Extracted

• • Target

    fb12feec3960016acbb3cc3acfc0c387_JaffaCakes118

  • Size

    172KB

  • MD5

    fb12feec3960016acbb3cc3acfc0c387

  • SHA1

    a8e79d8dc5b63a1d003a15733557cc5b7b1e35c4

  • SHA256

    5ac6522f20d7832cbe6c2f988ae665e153cc649a8b802c0f85919148a35a042a

  • SHA512

    040e59ebbbf082386337639191a50d4d7dc3c6e0df5a869f44a0dfa78b0d6b667445f4990e93d8713eaee6ad00bb53f80a36df396dbb08cfb1e84232a2ab19fc

  • SSDEEP

    3072:opXwNbzt7/kk95u/xiepdd0tAYF3DaW31VmCUsKUeC:X5RTk25uJ1pf0nFzaM1VmtsKc

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2