Extracted

• • Target

    e2f20f315bd1a5a109aafc912eb88973_JaffaCakes118

  • Size

    109KB

  • MD5

    e2f20f315bd1a5a109aafc912eb88973

  • SHA1

    1d404fc0ff6d0d5a7713afd89d89e55e6533f3d6

  • SHA256

    d948a091e4bc9050384e37380599f4e33985955d4e7125057e1985affe76e294

  • SHA512

    4b1d33813b65cc1c508e25f7339ffeaafb42de9752557180589f22b28a36e2a587c69e980ea4347b8adc5c79dfbe447d51006a77b7826688094716d2539762dc

  • SSDEEP

    1536:t5d6oOCDTvyQkb/ytxK1RxEDYnW3IeVuE+fvQb0OHdwUgoOQ5tK+DYOQBk:Z6PqqbqC1Rxd1SuE4O9wUKC

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2