Extracted

• • Target

    81b816140c0a3e46ece9e9c343ce79ed_JaffaCakes118

  • Size

    97KB

  • MD5

    81b816140c0a3e46ece9e9c343ce79ed

  • SHA1

    94120704243940fd913640d5b95ab9c09e244153

  • SHA256

    fa3d4d60206069750a481aff8cb5ae89f19f5e7651270c64d48ae154a5b18a17

  • SHA512

    4b3681c8be490d0540ec00a6b8fa7949bc4ab2ba73b8c4bb697ee00dcacec756539811c58c25592c42051bef7e41670e56aa1113f0aa970796ec7a8359e84675

  • SSDEEP

    1536:zz5ppigUeWd4veI86WLM8Jjfz2PUuIYN8jeirnenYevCn3a68DJfioyKow:nfJm6WLMSj7ApurnehC398DJfioqw

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2