Extracted

• • Target

    c0c2283124b8678bcb41f7f8382185ca_JaffaCakes118

  • Size

    100KB

  • MD5

    c0c2283124b8678bcb41f7f8382185ca

  • SHA1

    0457eacd0b2e5fe03b5f3a671dfb6e6d910b5f2d

  • SHA256

    07d9b67451990e4fa5603a640160ca42ba22aa551fce2e302753360a32bebe58

  • SHA512

    62e3ee9cc0f9cc990addfb08190edfe8e67a10623bc63effb01224e07cb91a67aae6aa6be80f23349d8c4f229bca51723b114b9ac76d965801c7aea42c30fc99

  • SSDEEP

    1536:em2gwa003EpW0+rq071iLQvODTRycSl7vf23lbPDjuII3M6HBvHaXZ:VhwQUpmG071iMvOPRMW57j5I3XfaJ

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2