Extracted

• • Target

    ed0036f868579f563c22d677ad8f02c1_JaffaCakes118

  • Size

    89KB

  • MD5

    ed0036f868579f563c22d677ad8f02c1

  • SHA1

    96e5e2394acc6cc874c83bcfbabf6666acd0b27f

  • SHA256

    fa70f66ded43fc42ee50313ef419a38caed79a0e022fd581f72dd54e647cf859

  • SHA512

    59b57d1c9288c78cb92a56701196f2e7b2f0fd64a116b833bb0f3483f6d2774cd7a2598bc0c28af5bd07c64d113b6fb03676fd6b402807e5c877a30934426e83

  • SSDEEP

    1536:XTkO+qVsqTI8sYPFoGkylvwfI3IyufthA2IOFLTannTvlEwpkzZg:jkRG00kylofI4yiYOFaJEwig

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2