Extracted

• • Target

    fcf7a03c81f689d5bab47227f3fcc6d3_JaffaCakes118

  • Size

    99KB

  • MD5

    fcf7a03c81f689d5bab47227f3fcc6d3

  • SHA1

    8421befe28a5d5a6631891ff843f6946054aa8e5

  • SHA256

    0e727eb3324c236de9b517eb934cf74139886b63589e4c3ce90013921d01eee1

  • SHA512

    71e3068a7bc1d3e93ed51e2e309351ba1e562b16689ce01766e67c0c9937ba5aa9e419b4660bf2f0662699d9e97a4a4bc221842598b33d6a40a99eae8681059a

  • SSDEEP

    1536:RzCLAokiQ20MXaS/Tw/fUaqRx5TIyIR/9jlGDO+bRa+niA+0DaVfuO1+VQwSm0xJ:Ycok/20pkPMboRnivV9++Pmr

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2