Extracted

• • Target

    c83d03b2d7ca15e45e150953be309bae_JaffaCakes118

  • Size

    115KB

  • MD5

    c83d03b2d7ca15e45e150953be309bae

  • SHA1

    748d4620d9e5fa19c55ad94ac2bc68a9721a681e

  • SHA256

    4eb572114dd8646bf196dd03d3153bbf9d2770a2647064953dbcda9ad99970c8

  • SHA512

    7654e5e20e7767f0d111d17b97c2b41c969cd23a486f78b53af1e64560c724d8b515580c446e5726f22891dd11dfe86a65581500d420fcf0f382c22ca0b72367

  • SSDEEP

    3072:BuYp/iEe3RugxvQXLbjTAC5XdC4UpQdd8T83WpQmAJQv:KlRuzoetD/dKTFyE

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2