Extracted

• • Target

    82e49521713842e2296364e318455929_JaffaCakes118

  • Size

    101KB

  • MD5

    82e49521713842e2296364e318455929

  • SHA1

    8eea68dcc9d82856580a1dd9c8726f800af85585

  • SHA256

    05a8480b6db9ecbfe7721c2e3f3b91ca1bb4f87283e3c8b6b872f5b551e3e7f2

  • SHA512

    fb7ac8a00e162b55fe1b9d6daeddcd4f535211c5f2ac418c89c354bd5ccbf13f38aee62065f52b20f92708dc72cb5b29a19ef42a05cca16ea370d84ad364c59c

  • SSDEEP

    1536:9EW7+rJHEiLakRKfBbf5UQnzlNonuo0KgDDe38YH3YWxY8BKvPVGp/kqf61OpE:aWquzjF5onOO803Y4nBKvPVGxkq6O

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2