Extracted

• • Target

    dc7e96dc007019f24ee7c179f77319d4_JaffaCakes118

  • Size

    158KB

  • MD5

    dc7e96dc007019f24ee7c179f77319d4

  • SHA1

    600b80fc50dc9e88c55e1e3a91d80a54498c20ea

  • SHA256

    d90bdeeca4341ceb66501df60ca2720c11e436796addc5a31a58aa5a08d6831d

  • SHA512

    c3cd206912c02673303fdbd6dd4c7c6436bf7e9eac4374c3cbc1ba1e07ada54e264eadda4fa467e4ebab4d205e0492b88f4147eb76ad3b62520990992216c78b

  • SSDEEP

    3072:CEleevsl0ucj8mY3BISh3gPsbRDNYgj1ikrrkgL9x5omD7x+wgZMYFc:CS2F+RSWSCmDNYZkrR9x5ojv

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealerupx

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2