Extracted

• • Target

    a048e535b98ba3063d379562643f8f2a_JaffaCakes118

  • Size

    114KB

  • MD5

    a048e535b98ba3063d379562643f8f2a

  • SHA1

    2c4b2e8a5bc5c86d45aa472ddfa9c263c727a58d

  • SHA256

    f5ca52be97f865fb85c40793e6258f26b30809b1ca05695646f1288cb5e5edaa

  • SHA512

    d97f6043bb3ca4481b24fd28fbb25c85cc18e51d4f2d4fcddff1494b6f5b451829a8b336bc3a2de6b91844a9c83b883180e6d7fea882e4303d7c631705c0eb23

  • SSDEEP

    3072:caBwZ6WPW1Eat9V5KWL1lfNO79/DMeVGh3OAne1iFkRcOYnlZi:caBwgQWKc7T5NKdDM6k3re

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2