Extracted

• • Target

    aa4281b1a4951b135b4ff979e5caa350_JaffaCakes118

  • Size

    179KB

  • MD5

    aa4281b1a4951b135b4ff979e5caa350

  • SHA1

    03ef63effd77852e422d26458116385ffe336637

  • SHA256

    94befba3d5b8f8a6612758a96e4bc17a0805210c9991113ae6187958f0132d8a

  • SHA512

    e61b023bcfe3a7ae04bd26e0e4e3099ed46a1a15640f17e46bd58814f833649d90f9d8c7dd3f152167432b5974c9e6704c0e66e794b1a4e947e826c3ec28c0c7

  • SSDEEP

    3072:+7UkcZNWLl8IGMrWKtLrStgkrM3x6RWgvgY5EK8nh:qUNNWLuJKlrwM3ngpP8h

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2