Extracted

• • Target

    e11819607ab5b60414bd237a0956cc37_JaffaCakes118

  • Size

    146KB

  • MD5

    e11819607ab5b60414bd237a0956cc37

  • SHA1

    f9e006ac0ca2321fb52a7200161a4bab84d7f6d3

  • SHA256

    ef309c2b8c953e2135e9512f23da0090d56a779d7aea9da5373b4562d145feac

  • SHA512

    da14e0e46769294455e520c0d4f58b5faed045e00417192c58de26caa877a0b41dc3fe968fd58538fc9b5e9be5b819a16bb41fb030cd7a2d7cdcd6be1167c611

  • SSDEEP

    3072:obQ8n3oe3YN/+IAa9bL97/JP4l8uraT7ZF7c8UZ97Kzb:ofnYuC+M9b9RDuQu8U

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2