Extracted

• • Target

    b902d5999d8cd7b1a9bc21263f4cca06_JaffaCakes118

  • Size

    188KB

  • MD5

    b902d5999d8cd7b1a9bc21263f4cca06

  • SHA1

    59a7a2cf0bcc63a9dd56338fa394d34d560beb57

  • SHA256

    1ea87939091fcd074b9087e3ae3dd05821b14843ca46654df6ba3180747a502f

  • SHA512

    da1ae6a69ce5dc159704a5d14959cb12aafd41da0eca802617507c5c5bcde11315f3e5d1341eaf7a77a9caf8db4e458eb08ed3e62ca5faa645ff8ad1b0c5b08f

  • SSDEEP

    3072:pfx6LrCRg0lOlOkNeP3SdHfvzLlQgED1QRjjWwCLqlF:znn2NC3wvzi9DGeZLqH

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2