Extracted

• • Target

    ff462d3be142ae81ecb65351ca11eb71_JaffaCakes118

  • Size

    172KB

  • MD5

    ff462d3be142ae81ecb65351ca11eb71

  • SHA1

    1dfcae3f33b3b4e73983618860a19399dc080d4b

  • SHA256

    d3690f8c4da0e6de98548225dd5232e6253b58d21d7bad6e47313aeea8dd4c98

  • SHA512

    b1e611ef463364ee8d1c947b234445ca51aa87b642f810d9d7441f1a70196ca17f253701dc4c697106cb2763a0d9758826ce27d11837ddbc71e1460687471754

  • SSDEEP

    3072:DpXwc3MQ7/FJ8TbgBvlXyiKFZ3oRW3EAud2HKse+:+gRTFmbU9XgvYRMduduKw

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2