Extracted

• • Target

    fecf96f6e982d1594c518fa3f4e39227_JaffaCakes118

  • Size

    190KB

  • MD5

    fecf96f6e982d1594c518fa3f4e39227

  • SHA1

    2692725603ee295f88981ea58ed167e50ba7cdba

  • SHA256

    0c465ee35c319557119d070144e3e8ee97011a4b304ac8a805f02a0bfff35239

  • SHA512

    66af151e44df329857ce75ae1dd138046ef0ed2f5466f322b88f494200329adc2765120cc394e20cb43e903e7577f7194a21d1bc20e6bc7c7d2388a8a95d6f7b

  • SSDEEP

    1536:P2L0rVHHLVMMO3XJFd1MkghBOpFsTFeoHG1Y4bq9HDcnL7O67szZYv1VwGHqyACh:O0rlHLO3rXAB2FsHz4bWEL7O6dVwHO9P

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2