Extracted

• • Target

    3e1992aae161dc5dc703c37de2b4790e_JaffaCakes118

  • Size

    145KB

  • MD5

    3e1992aae161dc5dc703c37de2b4790e

  • SHA1

    bf28ff73af39f26432b11560669d9728c5f4b753

  • SHA256

    39a24cccbc7ee6ce393a491e188b1f0bcc54d52f0456901cb143e859bdb8ed6b

  • SHA512

    8fc0822def784d58010e5f3183e226d1b79f218abbd89870c960902b9be4d674ce762c78d8d6c69e70174b4b94973a8c90917fde2e2f578e0e7999529e65a81c

  • SSDEEP

    3072:j4vNAofC/qax8G78cuRCOxLCK/W84W5OR1gQxE:Doszx8GbOCD8kDBE

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2