Extracted

• • Target

    0bd0f0125cfa6a3c42767f0d9d0a3a70_JaffaCakes118

  • Size

    95KB

  • MD5

    0bd0f0125cfa6a3c42767f0d9d0a3a70

  • SHA1

    71e8073a6a2948b19518ac9ab44561ac2410a3a1

  • SHA256

    323485f918018458c6858b05624ecfa56092153e39ce5f648b0ae524aed670cd

  • SHA512

    d5fe14552046552e3bec3ee544440bdcda6e49d353331a3ccebd79c856dde300133448c83118cb9811c4f6b5f06a5b2d439f13fdc04d4fe83f07fa6a5c67b792

  • SSDEEP

    1536:du/BgFpAX1OWy+csIzeiLiRScHSlTondcA7TNedCQyAyQyE8tdWhR:oZgiAWyBsIzeiLWSNTS+8TNuP4E8ahR

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2