Extracted

• • Target

    ed70184df21befeb468a94a0c1f6cfe0_JaffaCakes118

  • Size

    173KB

  • MD5

    ed70184df21befeb468a94a0c1f6cfe0

  • SHA1

    71be0f42679f38c0fef8588c6a3a66085ae94208

  • SHA256

    d2186b74115f15d11446523eee7bbe260648af0c52a645f0d68651ff94f337ad

  • SHA512

    c8070bf70401f6b2c791714b089e04a05c43c539f33c3b9e322f30209e03388241725a0ba26f8b76ce19e4e775a72f130e5c1dcc27b249b87fa1a4745be7500a

  • SSDEEP

    3072:CNydLIqg+IoIyy+Ae1WJgr2PVTaIM1x5z/hcZOL9efD:uydLxgLoIyy+N1SgKPVO1rbU

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2