Extracted

• • Target

    f355efce9e3c5399e35274ca90e34ec9_JaffaCakes118

  • Size

    188KB

  • MD5

    f355efce9e3c5399e35274ca90e34ec9

  • SHA1

    5e24063592fd2c065393cb9e4a5a5b0f0766cecb

  • SHA256

    1d8ef96e0521575c799504b62c724ee542b1bb1d7abef81f92f4684019d53a8e

  • SHA512

    9672a03ae95202e7e896028844dc8679b9c5f97d97008fc3ef1ab773ee56ec058115b9f87022a086ad58ac1e6491c5936009038d92dd1b8b0cbcd7d9e9a4455f

  • SSDEEP

    3072:jg6LrCRg0lOlOkNeP3SdHfvzLlQgED1QRjjWwCLqVJ:jgnn2NC3wvzi9DGeZLq/

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2