Extracted

• • Target

    8b2233269e472acbb47d00a2c8963e0c_JaffaCakes118

  • Size

    190KB

  • MD5

    8b2233269e472acbb47d00a2c8963e0c

  • SHA1

    c67828fc5b5a68459a5ff397efc2ceef726ff59d

  • SHA256

    d8237a3d7af1d567a08a2338f0b701ecab6f63441359a97e9077cac2bbf3a91b

  • SHA512

    817de14cf2e65486f01879f3fb5328c2a6aa461f21c1f5591e139474cd0a318ef20c5190346782cf74021e7ea5733a13f99012e4d5cb49d68bb8e64f2634c6de

  • SSDEEP

    3072:ePAA1nrt3kO3yyN1bNLSGd+ZP8Y2BMKB9Keot30Zp:eP5rWihN1bNLSG892BMKBZodo

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2