Extracted

• • Target

    dac7fc2b4b9ef1a4ac2fc4f8a2b9d9b2_JaffaCakes118

  • Size

    188KB

  • MD5

    dac7fc2b4b9ef1a4ac2fc4f8a2b9d9b2

  • SHA1

    6434d2f351d949a007a3e67bd083eb85b322a3f2

  • SHA256

    476e662a52c5fe6098d84b12dd1a60534a4f9f6b2e1f9a7e8ae9c7f6f21c2fb9

  • SHA512

    78041ff011883331f02f381c12fcf9219755b5c76f0247cac6aae692c03f0c0cb031c0f9436f82eb5039a51c152b121491157175e5d7eaa95f81a61a0dc9ab28

  • SSDEEP

    3072:zwermyUiDtjvhYwYpT8759EgXfdycSk1QoRjkCcJCB:zwUPCwYpo7TXfdyHk7JWQ

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2