Extracted

• • Target

    17f65b41c4f76af40495a63c8fbc37ae_JaffaCakes118

  • Size

    154KB

  • MD5

    17f65b41c4f76af40495a63c8fbc37ae

  • SHA1

    f9b7b77b2e6444a60f4a7a298330f904353a67f3

  • SHA256

    be52961125e5856e8fd70490b4ee4faee2f1d63914e26a35066e62cbaa1bbd41

  • SHA512

    faa22f6518ed0edefe509442080fed8c2bbc972032aa61619e1bbcd858e2a9779a138d562c42db524ba7813d45cafd5b5ea7f7f9278188954dca8ad3f3354044

  • SSDEEP

    3072:NRU+cHE0aDtccBPn067BDrwoVVy7OLRzRkY2I:k+DTwoTuOLRzRknI

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2