Extracted

• • Target

    ab1c34572da858da352b37321e88102c_JaffaCakes118

  • Size

    179KB

  • MD5

    ab1c34572da858da352b37321e88102c

  • SHA1

    3b52879f86ae615687215c4d3a66e8beaa003e3f

  • SHA256

    1c1a0781a16d50b71559122a35eece8feb115b7cdbbf666cf66f27abddba4a78

  • SHA512

    b6119bd30223a6725e2de967c2c113a991402bee21bba5506892ddd691a1326ad9c3907f04395e6d8eb2738700d029f363ad11353b29540efc6a43fcd7168b2a

  • SSDEEP

    3072:n7U+Bs+k+l8IGMqUt03XIC4SHP7pUR5/zc15DYYk:7Ux+k+u4II6HPVcYbDYv

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2