Extracted

• • Target

    fc595c039f19646ea3b8ed5e589fc1c4_JaffaCakes118

  • Size

    108KB

  • MD5

    fc595c039f19646ea3b8ed5e589fc1c4

  • SHA1

    9796b7b157f4534fbb338e46ef913a237142b849

  • SHA256

    460c3101d123292f47e52e2f99a116a04ab89ae8d63f2bdd548957ad78a2c83d

  • SHA512

    b32231c84b12c06494bf003940cfe86352d54284b240780187c8df5f15f218c56137c520f089b9ea51d1f0279f554e83476afc8025ab5aa4576a65cf75718a7c

  • SSDEEP

    3072:2+bwYZAKSYC+H6CTcC5J3Cc1zSxYduxwhDTbkBgs1s:uYZ2T+H6A/3PduqdT4m

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2