Extracted

• • Target

    b372a8c491e035209292836606367ee7_JaffaCakes118

  • Size

    178KB

  • MD5

    b372a8c491e035209292836606367ee7

  • SHA1

    2f92d74b0716fa1e85245e4ea04fb982a54b88aa

  • SHA256

    9ff98dee8bbb89d7fae86c8ab3f9e03bedeece2adef8a2c4c4e0e55b8f657205

  • SHA512

    9e30a1ba565f6da3bf3535600aaf35a8bf7dbba4a783b3eec4a06dc574947eb9dc453e524a9e596db156519589efae7c7aaaa4156223728383ccc67de4a3a5b7

  • SSDEEP

    3072:mw5vdKVEJASNqIqqim//RAL8bCNiUAtd+Q+zb:dFKVEJASNqIqw/pS8gS+3

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2