Extracted

• • Target

    3c574effdb707730d74deede7b3f9b30_JaffaCakes118

  • Size

    94KB

  • MD5

    3c574effdb707730d74deede7b3f9b30

  • SHA1

    1279bd9ec5854f0916aa4a1d839d6ee5f18e67f0

  • SHA256

    773d10078e8d81ee7f0f9d057a3e708b61ec53c2ab8c2286b204f9d31d2fa727

  • SHA512

    16bcde765eedf92cc75cc7f4e471c80e220b1c67554cea55a0c04b65daa2e33b93a26faa96cc8d698e055962d90df3fcf42299bc972c4675648f6d736699c7ae

  • SSDEEP

    1536:E0mZgNVE2xENUT97Y++IjgeU4Ew2Vh0fiHmZMQqv9utPeSFZT:1mZgs2xaU5s+NjzEvD0nZMQqm

  Score

  10^/10

  ponycollectioncredential_accessdefense_evasiondiscoveryratspywarestealerupx

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Drops file in Drivers directory

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Hide Artifacts: Hidden Files and Directories

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2