Extracted

• • Target

    177244bfb4cfba9ca1d9c9a852a2c680_JaffaCakes118

  • Size

    121KB

  • MD5

    177244bfb4cfba9ca1d9c9a852a2c680

  • SHA1

    6a297b09ad00cb261b509d3681c91ffaeec954b0

  • SHA256

    093c5c655c6c0ce094fd40180ea2256199ff3b0a641c87626c3e6efe5b28615a

  • SHA512

    fbb9d2c004f9f825ca96f446926192d7e405d26f74c12fd7167167b8032e656beac0e86313d717089df162bf0719b7cd2a9273a13551fad5eb743cbfb89a5f0b

  • SSDEEP

    3072:TM+eF26PYMSW7bv8abweHauKp4Z7srbgeQAxux:TM+QLNSW7bUNMaR0qnQAxo

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2