Extracted

• • Target

    ca7e2b5b8bc35576479b1bd7d9cc90fa_JaffaCakes118

  • Size

    109KB

  • MD5

    ca7e2b5b8bc35576479b1bd7d9cc90fa

  • SHA1

    3b2858f47e536e5953e20a974bc1c44c97cc6487

  • SHA256

    5947fd8a294ce2a4a6b5bb4e1185a68d863cf24ccab08a7c81df63d7f082401a

  • SHA512

    537067b933f9f4aa6902f9b1755b692c3564ad0230beb8f9c26e882072331e891d2bff7f16dfb3cee62661355727da3f09751ce308dfc3c54661157416866ec4

  • SSDEEP

    3072:pigo8nMdAb9scEQNj/iHa5Gnef39YCY//65:p9zU4OcEVH4GneB6y5

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2