Extracted

• • Target

    fb5e454aba6e77351e0f4934d9f89946_JaffaCakes118

  • Size

    196KB

  • MD5

    fb5e454aba6e77351e0f4934d9f89946

  • SHA1

    3b3a66678d5c9e9fb004101bc1e31e47ee17a858

  • SHA256

    06e194d673a6ae4cb67a3927c6d03892b88647aa16541a093a07e582091892fa

  • SHA512

    604999645691168fa92bacfb167d5a5b0c68da58d9da5f2f7ac0d4edf6eb01a0194b611756d2485c0730e3dbce6f20c08ed1d2f2364eb56af9d1499945a24309

  • SSDEEP

    3072:Cci971s4saROyoYemlikUawfGd/sOAOBK8b:E1G9YLi6sOx

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2