Extracted

• • Target

    3cc58451f25b787a97637b0be2c3e834_JaffaCakes118

  • Size

    160KB

  • MD5

    3cc58451f25b787a97637b0be2c3e834

  • SHA1

    e836d39fc4bc9b3fe1686e2b151ab188757dc8ca

  • SHA256

    e99a8ae06db7a28cbbb85e69001307c5527be7947b8e9112623037b436e52912

  • SHA512

    e31ea2884093573f32770983602df404d59b96480b28a15fca38eb7bd258cfd121516a6c3763ca9a277510390a2f0b7a95363dc764799523f39c2d9706607968

  • SSDEEP

    3072:GYu96cwvd/LMd87C+ZolQP27l+xq1KrdTWwwE9M:GYf7d/LXW+ZMQu7l+xHrdTfBW

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2