Extracted

• • Target

    ce059f3201c43a3cef42f2c437312b6c_JaffaCakes118

  • Size

    156KB

  • MD5

    ce059f3201c43a3cef42f2c437312b6c

  • SHA1

    906700212c6399018c89ee14cbb345c7f3a03617

  • SHA256

    9eb2d28481181120f493caac21cbd9eef580b134faf1034a35c367bc371a623a

  • SHA512

    a8be9883a241c630860f57c9fd2975382cc212247fac5cb48b83c45101c39c75a5a8986ec47d0c4f7a8276b9845ac14a7e10b5f817d844ae084669990086868a

  • SSDEEP

    1536:2BmxFV2Qk93V6l0rkTZequr2i8U/sgp2M2TvqIqqq8U2bqUy:nXV2p3VocK+2ibE33vqI9FU2b

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2