Overview

overview

10

Static

static

3

1020228447...18.exe

windows7-x64

10

1020228447...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10202284470db3164b59fac8d86c00d6_JaffaCakes118

  • Size

    88KB

  • Sample

    241003-xf6l1avakh

  • MD5

    10202284470db3164b59fac8d86c00d6

  • SHA1

    0c6a15f9692f6ecb891844bcefb128ead0398c1b

  • SHA256

    e8a5a32e62c5ecb748e0823cff32323c1d3b7d34bc2f96b80a9c1d9bb22c4d53

  • SHA512

    2cbe7ab28ba034ca5bb4f08a3a7466eeb89b11a76fa675a334e36c87c17c3412a9d2019ac48f10b670812f6f2e9b1a5cc0b6aa5c1eec1ca8a3a8364a4f362388

  • SSDEEP

    1536:096hDJGC7qSlk4mJBEW30TS0jOIUJHrSMxQfc5w0rwgu:0MUYVmJqWj0iIYKfow0Lu

Score
10/10
ponycredential_accessdiscoveryratspywarestealer

Malware Config

Targets

    • Target

      10202284470db3164b59fac8d86c00d6_JaffaCakes118

    • Size

      88KB

    • MD5

      10202284470db3164b59fac8d86c00d6

    • SHA1

      0c6a15f9692f6ecb891844bcefb128ead0398c1b

    • SHA256

      e8a5a32e62c5ecb748e0823cff32323c1d3b7d34bc2f96b80a9c1d9bb22c4d53

    • SHA512

      2cbe7ab28ba034ca5bb4f08a3a7466eeb89b11a76fa675a334e36c87c17c3412a9d2019ac48f10b670812f6f2e9b1a5cc0b6aa5c1eec1ca8a3a8364a4f362388

    • SSDEEP

      1536:096hDJGC7qSlk4mJBEW30TS0jOIUJHrSMxQfc5w0rwgu:0MUYVmJqWj0iIYKfow0Lu

    Score
    10/10
    ponycredential_accessdiscoveryratspywarestealer

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks