Extracted

• • Target

    0b3091157b38349f97de6d8eb75c3527_JaffaCakes118

  • Size

    122KB

  • MD5

    0b3091157b38349f97de6d8eb75c3527

  • SHA1

    52c613bc1420ab1298029a863fac70aedb083594

  • SHA256

    adbccf34d265498ec5b85495d68990c2d5ffb6402ff68642432df279b0ff6fb9

  • SHA512

    9c05c5b70ca64de2f1262eda46d6b78296e844bfd6f7e040f36a33220e20110789e508368dd0594833c368f2c0b4ab90cb4f20516f14f0d1fbf14023477d98d3

  • SSDEEP

    3072:HeALCHHXTSx9m9S+rtXMUVYnA5bgLno0LLmZ/oxOOh:HeALCHE0YA5cbo0m

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2