Extracted

• • Target

    5c6823ea700a42ee486632089fce999b_JaffaCakes118

  • Size

    184KB

  • MD5

    5c6823ea700a42ee486632089fce999b

  • SHA1

    b07942bc852dded363ef7e35ca96e4ea237de2f8

  • SHA256

    cf4808cf4e2aabf48af27bf48950b50b70ee8ef1503630aeb2c22c4e61d74b53

  • SHA512

    7219e9cc0b2188ce170a08be1b803eb0f2ddb88e7592f1c2e850cb46f1a1c095dc77be1f44f929eb823a5f50af108a91c065bf1ca4c42c9301a7f90a6852f10c

  • SSDEEP

    3072:naS+LVsPfQtxfhdHDvn5OdFgZZM4BzWzk8Bk8lk8zXB6:apVsEfvHDvn5NvfBzyXE

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2