Extracted

• • Target

    dd2660cc838fafacf5b7e70b3ef9e66d_JaffaCakes118

  • Size

    108KB

  • MD5

    dd2660cc838fafacf5b7e70b3ef9e66d

  • SHA1

    955064f7276b000437be209406777f3089c56c03

  • SHA256

    b87c60ce2dc9a60d4b6c97c2ff2d4f6e0e2d0790346f2de5afd413a2537ecf1a

  • SHA512

    9eb4601c41c5cb22c012d79e46d3b23fbc15943d495543ac5c57bee1cacac3e41f2729e6aae7225d6614c237c94716535a266539de260fcc47981d7222ca95a4

  • SSDEEP

    3072:zNSEEsIJpYYCnDBsA0EckGlVaax56xYOurHqrGUzBes1b:AZsIYTnDBTx4XaGOumrTz/

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2