Extracted

• • Target

    9100f6ea6797f8c4fc808b7e706c46e2_JaffaCakes118

  • Size

    185KB

  • MD5

    9100f6ea6797f8c4fc808b7e706c46e2

  • SHA1

    855d5f916afb50824713f067bc58cc21ecdbe903

  • SHA256

    06c3c65a0a9c9b33f103cd2c5bbb5db90de818f827dc6d0c64927bfb39226281

  • SHA512

    fa1a983cee18e363347fed3005a5b244309f9da877e0ca993618602dfce8a83bfa2c67ea7851dd238cb463662fcf8d74d2ec1c2404d4518a82af19135d49dbb9

  • SSDEEP

    3072:7NQnjWwoXuidiHt25WDtdg6qkDV1QoRj7vRT:7codiN2ag6qKV7Rd

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2