Extracted

• • Target

    18011ffadad3538abc66adebd75cc56c_JaffaCakes118

  • Size

    188KB

  • MD5

    18011ffadad3538abc66adebd75cc56c

  • SHA1

    bc14f1b30ac1d33b9effa66da11837c04b977b89

  • SHA256

    45bc83f220ce7749e283ce1794dae7a3172c9cbf0bce83ad5d645c3c357ff348

  • SHA512

    a9c01982df643475a5ac5f859f8f67ab0e698100038a524fb349552f12a26538c59f4a7fac9893d0fdc14c61ca28ca86253f6a62782e624936f15882150fe62f

  • SSDEEP

    3072:nfqAJwpyBByfwYFt06Y2Fi+IVfSiKt1QZojyaPSmy0/:iNuOFq6Y+IVfpKtujkT1

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2