Extracted

• • Target

    11706f81c355468e514cdf2446628f64_JaffaCakes118

  • Size

    183KB

  • MD5

    11706f81c355468e514cdf2446628f64

  • SHA1

    674b68f457cbd705f067d391e4796cae1c7ddefc

  • SHA256

    d88093e6b0ddf8709a3ffb460a78b50871f49db199c026e5168a6adb879bfeec

  • SHA512

    3dfc5f7be719c10c226dd17862c6143fd3a63c5df3716a1043894a6dd04529c291b873d4c4d8c22a01facaa49ce48822800da2ab32a3ffa5d1d726722d61c13b

  • SSDEEP

    3072:jySZs1YC7tR6f/hdPfwsoNyrr/BtWzk8Bk8lk88+BK:jNZs56fJdP4soNyrr/BtN+c

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2