Extracted

• • Target

    JaffaCakes118_48f3f67f267e33d5d0b01f392a6c1eb0

  • Size

    119KB

  • MD5

    48f3f67f267e33d5d0b01f392a6c1eb0

  • SHA1

    86b464a5755b068cbfb9c100cd91ff930a4a76d8

  • SHA256

    6070e43ff25d51bde67ed4add63f757f660f371c51e0b12d6493e42dd8db49a9

  • SHA512

    361fb9155dc451561d499ac65a5609dc2f304557daacfde1a2de530304a2f1d16f93e35413798a91d55919e9faa3512dcd38b422945f296e5eec7fbbf01e9983

  • SSDEEP

    3072:nI8AiSLHU444NVO8umRoOS4cgzUUXdvOA51c:nIAk04xXog9IuOe

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2