Extracted

• • Target

    c70a1b8e6000d51b45b964c9bf30bf88_JaffaCakes118

  • Size

    188KB

  • MD5

    c70a1b8e6000d51b45b964c9bf30bf88

  • SHA1

    3d8b7b2eb045e7e008693a1621bac6326bbc0267

  • SHA256

    45cbf17fe6103d0f7807abe81e90962750a2b601501996c8ecff0d56ef38cc55

  • SHA512

    7f79cfbb8ca1fbf4357fd70e51a62a340b40b49aad0dd5228bc39971b8517d7d9fa6f76a3e31c8f8db864a044616619cd18bb4ae965665884b63df2f81763f48

  • SSDEEP

    3072:IzsermyUiDtjvhYwYpT8759EgXfdycSk1QoRjkCcJ28:RUPCwYpo7TXfdyHk7JWx

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2