Extracted

• • Target

    a7f1ca2674cab1872871f33572f79350_JaffaCakes118

  • Size

    90KB

  • MD5

    a7f1ca2674cab1872871f33572f79350

  • SHA1

    55bdbc39ca899ddb216d2cf714211da6fd120de5

  • SHA256

    359e5c2ad2468758816b085722212b43135588f5cf6f9b2469ce9d99407ccd11

  • SHA512

    e62052c259076a52ab3eebd59ff26419c508b1365a5320c36d45e4f961d7ed1b688cde6ad45e265e734f4f1acb10578faa47d539e939996c8035dba02900b5f0

  • SSDEEP

    1536:v7/R8RHzreA5Kj2WcM+UqTa/XFXhNJ9Yme6/6W7KGgIIH9VY:WzCXjNqTa/1kdIeGgIIY

  Score

  10^/10

  ponycollectioncredential_accessdefense_evasiondiscoveryratspywarestealerupx

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Drops file in Drivers directory

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Hide Artifacts: Hidden Files and Directories

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2