Extracted

• • Target

    62abf1434f01d65f9458126da65bffaf_JaffaCakes118

  • Size

    130KB

  • MD5

    62abf1434f01d65f9458126da65bffaf

  • SHA1

    a3f0153e1df31acb8eca8fac58518d3d5f9bceac

  • SHA256

    f74410978a13652c78ec7c3d9e570c93e6fe564bb700a857616d6371e2c1365d

  • SHA512

    f8210b2408e9a184f27bbf3f230e9d9ac6d06d58a7bdd3944eff1c80947016b5cf691b04a9c76060d10362a7166784d2623c71c41e1bb603c23f45fc827919ab

  • SSDEEP

    3072:RB8+g8X7vedG7Ne3vP/xk6ok3kpN0ZK7ei+:Ra+fbedwNeprZKl+

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2