Extracted

• • Target

    c66e93dfa52756c6b99d18d1b77ef46b_JaffaCakes118

  • Size

    139KB

  • MD5

    c66e93dfa52756c6b99d18d1b77ef46b

  • SHA1

    597940a64067fe379b4835a57b4833b56074e34b

  • SHA256

    8b88a5888c7136c99994f79ab4855b01bdd531bc4376e05923b89bf62af153dc

  • SHA512

    be37578ba6de5c32f5b9523f68bb0b031bf63e4d3fb075e538290fe9a5e6b9e79ac8c9ed9a9dda4999c1a7c3d22e3ddd946ad8d263d1a749211ca9587eb7e3a0

  • SSDEEP

    3072:RVMTdJW/PzLn+jq4U5Fx8Zf2Ztsh5LZeqLmTzmjiFkRcOYnlZW:RWW/PzLnZiVYGNeh/m

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2