Extracted

• • Target

    000cbb278e4f0194e7c693160d7975bb_JaffaCakes118

  • Size

    148KB

  • MD5

    000cbb278e4f0194e7c693160d7975bb

  • SHA1

    37816b3dd863e3b706c72cd783107ac795332647

  • SHA256

    3f8e6cbdb5b689a149346ad692ff53e92520497b61c1737fc721fc86b95a5e09

  • SHA512

    a83280dc965d92553270e7468c72cc9e49f75ad78041bdae6f9264119cf8b3fe254c8667c81930dcba93eba9bc44325c33b32a1c293968d4704588b1ccd04c8e

  • SSDEEP

    3072:BDE1UYk4Vz9QXoiTmKnxoTFnWQyuTFslBgpuT/PTN6:9skoimKGnWQyucfk

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2