Extracted

• • Target

    bc46aba0800b15c443efe967b9786cd9_JaffaCakes118

  • Size

    124KB

  • MD5

    bc46aba0800b15c443efe967b9786cd9

  • SHA1

    1fb9312b924b2d86c59c1f7fc91a9370add83a0f

  • SHA256

    be9d8d8c4014af69406b1e38c6a345be115b57cae8d5743700276e304ca73cc1

  • SHA512

    4a27c1c31cff55480e748518d636b72c4a81ccbffdec1a46159f0b4b5d5395d2a3fdab4e911a83d6c8be2f67f7e89a544d03e0264ba69e6b80d6e1fdf499c8b1

  • SSDEEP

    3072:4BGjI2CFXQPrwxGGnQ1A1qtKHU3SS4XTbW3kgILaDH53apyTGK:f2QeGaQ1AQIU3oXTaUgIGDZQK

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2