Extracted

• • Target

    458b116d45e8de2987c582a33b986406_JaffaCakes118

  • Size

    185KB

  • MD5

    458b116d45e8de2987c582a33b986406

  • SHA1

    44932e65816a0e3b28d46e17878daf6317257a11

  • SHA256

    9b7b5564aca759ef9f7485c4931a63674695426d05d4a2c2f387f1116f5f89e5

  • SHA512

    b2cbd776690dfa3d115e32e9377aaec59a933eeffa0858417d2c590961212adbb4d94b060408b522bb7fe256cd507170205a2d199de8a2e00e614a1b89888ff4

  • SSDEEP

    3072:7pE90/Nj8qZsynaGwAq+8ou50X7Ht1Q0tjZQ3YCQ7WC/:7pfvVnnwKu5obtTuYCQqG

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2