Extracted

• • Target

    9b3e6693e9da6efd0c2206b830f41dfb_JaffaCakes118

  • Size

    250KB

  • MD5

    9b3e6693e9da6efd0c2206b830f41dfb

  • SHA1

    281c6c7a4eee0e0e0d25744b223762c69c1b4c25

  • SHA256

    d97f4c81e48a1721ebdbf9976d5457f7d159287351f0c72af0cd9d32bfa8e599

  • SHA512

    2a07734da4ad1ec559677dd1323f29805cff0e16cdf94d31c3ae28248d95aa85405ff03f1d693263bfb14743291ac42456d3f096eb238c5f7917c72c763196b6

  • SSDEEP

    6144:4SQmyXB+8lmqwO1mGSQmyXB+8lmqwO1mJ3:4JB+Gn71LJB+Gn71I

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2