Extracted

• • Target

    831f05e5847d6722a130cafdfd16a234_JaffaCakes118

  • Size

    180KB

  • MD5

    831f05e5847d6722a130cafdfd16a234

  • SHA1

    681e9fd2ee795f5c9d6fadb959183e6a1f19f8c5

  • SHA256

    889909a5f57bccb3bfe82123fc004d4206bc97c89b41bef3b8b2055bcfbe5977

  • SHA512

    cb7e2a79be41e11847f9bb2d7f549d2613ccf90ad16b287fc94ba0bd69ef71ad7ad53c66e57533f7bb0c2aab73a73779c33a6e0197baea980f7472c9dab29516

  • SSDEEP

    3072:vy6L66666666666666v666r6J5goWLZTr3hWpW6QIGRRNCDkgObR66666666666L:q6L66666666666666v666r6LjWL5r4ZP

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2