Extracted

• • Target

    d7bbe0b9e25a39eeca708f5cadaa1410_JaffaCakes118

  • Size

    106KB

  • MD5

    d7bbe0b9e25a39eeca708f5cadaa1410

  • SHA1

    954695d8caf324c7be4fe40bbe6da26df4fb3c78

  • SHA256

    e558ea34f824fe9f9b9bde765c45a25c2136731c95de1349fb078d154209ed74

  • SHA512

    269c327379d25188c5ad598f2742a5c31aa9f382b36634ae76611db0ca8f03a91ae4a4b63de46f8ad642dc8a02a6d4cecc3faec81be5478a89a047c5ce3003b6

  • SSDEEP

    3072:ljwge60bzfV8X10ZlQno5f3QtrZ4TxKemJqiYIwEL:ljtIfG10HQo5f3QtCTxF6qhIBL

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2