Extracted

• • Target

    5baf6a91a647a49307bc2b7b54d9f4d1_JaffaCakes118

  • Size

    160KB

  • MD5

    5baf6a91a647a49307bc2b7b54d9f4d1

  • SHA1

    9af337a65845cbf5ec86cabf03586d627403591c

  • SHA256

    e4fc9ff40d988fb247e4d7d9776b16310931feb9cbb0034d502bd3c831005b66

  • SHA512

    a34e30e9fc44cdd576653fecc12f094601b2fe99cd6aa07f96728ba165f09ed996565a9dd7f625da5b21dbb2e2501e4815a6e38f8867e5de911a946d260a6f9c

  • SSDEEP

    3072:IGgP6cB+QExKUW+JOamQO+Cfs25yHrdTWr1wEX:IG7/QMW+yQZCfs2krdTCBX

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2