Extracted

• • Target

    4ea6d81761299a39be6d8323578d2b6e_JaffaCakes118

  • Size

    160KB

  • MD5

    4ea6d81761299a39be6d8323578d2b6e

  • SHA1

    4a97dc2195c7fa071d643132d630a586270cb3d1

  • SHA256

    ce47e3061b4ef72cc33bd34de2184e799690646063f8d35ef0633a50ade78146

  • SHA512

    ff3c3dfa60a25c587d01bbaa0102cc24ff5e96f75a98ad166bc996884223aaaf80a6c3bf219293bac73d1a0d4895c17a9cd714acd3bd6f9f7e3f6ef6826bbcae

  • SSDEEP

    3072:8OaU6cvIUSEzyp256I+lQTeROsJw/iYoqiyHsCBNGSlwED:8O4fUU256IuQTGOsJwpoq1RBNG6BD

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2