Extracted

• • Target

    fac8e06fe3c0aeda3c24004a7f251678_JaffaCakes118

  • Size

    188KB

  • MD5

    fac8e06fe3c0aeda3c24004a7f251678

  • SHA1

    5023e8cebd144132148cda3cd16c4451e618dcd4

  • SHA256

    854bbd4a755651564f620985defb6cb5ebfb78391b71f929519c804f9115a9e9

  • SHA512

    626f0de0fe0e7907f3527302e6adfc87fa8f9c6269f6cef5cffeb833eb8eb17380da260310da289e5b3ea3ee2cea8ac3bfd7f2e2a7d5cee42fb596e881c37e3c

  • SSDEEP

    3072:RRM5mgbWtJXJaCcWuzlIxYtUVPbHhEnoVH30T0:RO5BbWtqr9lIEyzBEolH

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2