Extracted

• • Target

    0740f4d61893f6a72f8ea11af4c52d30_JaffaCakes118

  • Size

    122KB

  • MD5

    0740f4d61893f6a72f8ea11af4c52d30

  • SHA1

    ded1ae7ab67d459b730d207ae6e217c44b42201d

  • SHA256

    2b970fe7221cc64e585dbdc4db41008b500a2aa6b59b7ff5e762932c71ee6d69

  • SHA512

    ee76e07b008027044d07947f1e9efe6a1173367da15bb3a20597370b27b0c70715bffd5ee8df0b3dac446ffbf44db1c617810ac516d8c9f998648e4b5420f6a0

  • SSDEEP

    1536:gL263ywh0ZsCw/k2ipzcQnpg5/1rVb+NHVXsrZXGtE28SHdW+DSkCLaKHCBsz9jB:tIB3pz8eOq9O8S9W+oYq8O

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2