Extracted

• • Target

    8ac8ca5f8f65a2a4398962d13ffc9794_JaffaCakes118

  • Size

    188KB

  • MD5

    8ac8ca5f8f65a2a4398962d13ffc9794

  • SHA1

    3d1bb149abbf4a96fb6e517dae71acd45e85fb1e

  • SHA256

    b581894f6bb2729613a44dc86713933c5528bd67b03d1e49593ec10b39450ad8

  • SHA512

    86e8d5f529586a1a6be35b3c69051e83acd29810204ce61df519098f9b20bda0cdad7c649636ff9ea15d0d6cc6a6769b2c1ec694495707766e1f39df237c3938

  • SSDEEP

    3072:OzDu72N0mOgi+R2jQzGnaBbQMX88U71QhbjgTgRuEr:UXCDjiGn/MX8J7mgqd

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2