Extracted

• • Target

    a327dc3e9f19351468d1202f953a0404_JaffaCakes118

  • Size

    170KB

  • MD5

    a327dc3e9f19351468d1202f953a0404

  • SHA1

    6f3457fd4107e9726d0939e0a3bb26cfb91fcb95

  • SHA256

    dacefb245d7558c569319e8a0991f2e2bdbca419a89bb4360b4bf8a4f49b6727

  • SHA512

    35b67edd2a5d40d2b7f77ebe71acdeaf57ba80717afd1be9a990de14329acd08c358f02adaec50b4b66b1743a5729597696dc2a50e3970e20802934895f755cc

  • SSDEEP

    3072:guRCda7p1a2zBn9VUMSI3J3C2k5WSvFD2K/YeO:DA011vzB9uWZy2uWkD2KM

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2