Extracted

• • Target

    fa0e4eb4a8ad9145d5dd3f3e1bc8a803_JaffaCakes118

  • Size

    108KB

  • MD5

    fa0e4eb4a8ad9145d5dd3f3e1bc8a803

  • SHA1

    45dec4503819bc95f8e7814118ca5ea46a2835ac

  • SHA256

    4eabb54763fd4aa302402c046cbef855d7e512df8111387e2febf18f74342d9e

  • SHA512

    79e44db443d39353f5492bf88c3c61bed28c466e053d1f024bd25e6fb625a944e86a69b5e46ad3ccf8a2545418fdc6b2713c45d0dcb1a03a8d8c2e038e1b9200

  • SSDEEP

    3072:w+yqTDWSmYCX27hVuQNRxaw6jbwxYjKVreBcs1I:NTDkTX27xHAwsjK4C

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2