Extracted

• • Target

    e55d7616bc4e28ae381c341e2af091c0_JaffaCakes118

  • Size

    317KB

  • MD5

    e55d7616bc4e28ae381c341e2af091c0

  • SHA1

    b2539cc1e08a6338dda2139d75f9284dcd3f6bfe

  • SHA256

    cf499579bdc191639a8659f45ca746dab0553f1a93f8d1584a58791eb0f65b1a

  • SHA512

    0e683e30b9ffe654b7ace5379380bf723e9623be7b0012bc55a865481ba0b340a67308f598655fed080595d67988bc933b6aeb8f1c21c278c94e31c07ea669d1

  • SSDEEP

    3072:umYGp+2GcIB28KpcqYfzWHm+wVnkfDDffffNfffLffffqyffAfffjffffNfffLfm:uHvoiK0b1vEoOs9BdavhlR

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealerupx

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2