Extracted

• • Target

    91888350c99c40b5113e767b83f42a4f_JaffaCakes118

  • Size

    159KB

  • MD5

    91888350c99c40b5113e767b83f42a4f

  • SHA1

    770a3f7b259171068fd7e952ee65f02bd673f244

  • SHA256

    742b2a870b1e8369acd280577e04c94ac65d82020c5c7a70c2e2e37e55c7237e

  • SHA512

    30675fefbc8d0ed8e6eeee99449302302de33d87c7f50a28b3f3fb80e5ca83fd1a4757a54a5838176a5b9122c344178292422260077ef3882a424eccc2491f44

  • SSDEEP

    3072:jhWUoY/VIEwM4Bq2ZfUNIO2XpHspZ0lowV/6j:jhRVZa/ZwIzMpCllA

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2