Extracted

• • Target

    3ec8f943434db5d4ba25688062d7419f_JaffaCakes118

  • Size

    121KB

  • MD5

    3ec8f943434db5d4ba25688062d7419f

  • SHA1

    0752b6b1ed05c0b3a9ba67a113a3b264c1ce3506

  • SHA256

    0ad96e8e3334455f8904f1a026fbd8c3236e45d0f9fb397e393b2c529772aded

  • SHA512

    0790ef6efb564ceea506f7d0e0c355556d5f536cdde0d9c6754189b61fcb7aede13a8427143a65384b6a3a4266678e5fee8059816f9a27e58fe3733309caa98e

  • SSDEEP

    3072:VQSkO3B9J7pd7rv0xsuilTYqEtZj3PEk5sdUC+0yK7Yej:+SkOxz1dH0qpdSnj/EusdUC3yK9

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2