Extracted

• • Target

    e7fd3ab02295d8ca54adf05b7bb574d9_JaffaCakes118

  • Size

    151KB

  • MD5

    e7fd3ab02295d8ca54adf05b7bb574d9

  • SHA1

    86e6ae3ebf246d17b1e7b261a23f174f48c5d90d

  • SHA256

    ee89cbaa2395f735ebc2330029e0b2ed520e11f62a4501b59898d050d1e550fa

  • SHA512

    49bb66d9493c1e91095483dd9c554e75a0f6c5deafc7f14fba44a3066aedfce48c8ce97826635aca5b251c27deadd0bf54fb5ea01000435c82e3f3915353567a

  • SSDEEP

    3072:lSmd+k4wAJcH5F3n/broRAgsY4fRHZkq5TEeetQyxk/rFL1f:14wAqmAPnHZNq9QWYBL1f

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2