Extracted

• • Target

    ac6f59cb8e886b86903e9ad914b0b24f_JaffaCakes118

  • Size

    106KB

  • MD5

    ac6f59cb8e886b86903e9ad914b0b24f

  • SHA1

    c6c98aa5817a6d4bb72e739f52289f2bed33616f

  • SHA256

    d4c88ef063a3ef3e4b5a5fbce58020f3bf7888373b71cc03a9aecb3f83ec51f7

  • SHA512

    7e877aab7b84a8baed4f7b929986b6c70c15616806f7308e3a9d02e14e93433df32ef32a0bae0c4898242a43293afc8d669165f502cf551caa32f1d711ecab49

  • SSDEEP

    3072:TZ9M56Eup9LpxgaZxmYDkQWjUZbT7gnAwAwxX1u5DT5ADawEx:Tjxz9FPZxmYAQWIZbT7aiwxFuF9ADaBx

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2