Extracted

• • Target

    a706a5a5c29af50a72cc16054f0ed503_JaffaCakes118

  • Size

    140KB

  • MD5

    a706a5a5c29af50a72cc16054f0ed503

  • SHA1

    b3815088e54ec9c9dfb7e95a51aac1f7267db925

  • SHA256

    f2e9a83a5b6047c25d944732316be7347899a16aec7a3771ce2c0505b925b3fa

  • SHA512

    763059d759481abd47258b89ae1d04f545bf3de159047f3315a2033c3f986b9c3f7d6ea67426445a65f316de41b28aacf51ce5c133f971eecaec1c75ac62649a

  • SSDEEP

    3072:v0bsSXNllwxDOnv1HfIXxlUzxU+XGGKh/uYE:v0o+Nl0YtQ+U+4/g

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2