Extracted

• • Target

    685d027a29a81ca573a267578e2086af_JaffaCakes118

  • Size

    188KB

  • MD5

    685d027a29a81ca573a267578e2086af

  • SHA1

    7e61897f67c81b7fc4bbc908b256c3c3cb7e359c

  • SHA256

    cac52c8ec470e0259e7ddee463f9d77bcb16dc5db47abde210d458dc5b9c5db3

  • SHA512

    e0d7bb2a1dd48256eaa94df664f683211a0146221355de88d339e14fc85c3a4a83c4ca2e6c226596c66c0e982feff449b58b20d342157158bfaf32c494f1050c

  • SSDEEP

    3072:e5yPaeBcc9ljpm+OJuUFlGz/E581QYvjDJDX8cmO:e5UfpnODlGz/Q8j/FX8cn

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2