Extracted

• • Target

    6d05310e4a80aed8e42b34b31868a4f5_JaffaCakes118

  • Size

    95KB

  • MD5

    6d05310e4a80aed8e42b34b31868a4f5

  • SHA1

    38acef12d7aac6b0b287f863932e2ef952c31c1e

  • SHA256

    dd93302af4314e2855b8a9bc25487951b66e3ec0fb53dd34e65444fd6fddf1a3

  • SHA512

    bc3d7db920bd929cc56246dd523302c1d59a991a03eabae723b84793103164fda174f8d4dab513003ee43f5a4ab56e0d1901a8f16787fed42eba48cc1e66a0db

  • SSDEEP

    1536:lqw+LCmF3f6gwyPwGAvOCRdikXZUkQLHgLdqA7TNezQPCIlEw+ph:chL3CfyPwGAvO2dpUkQDgY8TNl5Kph

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2