Extracted

• • Target

    JaffaCakes118_59591917d93a537c0543559a7026b9f0

  • Size

    131KB

  • MD5

    59591917d93a537c0543559a7026b9f0

  • SHA1

    a53b1598fcf80846da8469844b6cb0c13adb22db

  • SHA256

    08623a47d04e3297a5b2456e3bca3b2f19749eea823fbb2ddfe12fac15d5eebc

  • SHA512

    1632b39deadcbc0fdb1392373ee688ad343cc68ee13976e395580615276216617dde66a75d96056c51900aed1480a934b6ad9b20abe03caadd4758b29881485c

  • SSDEEP

    1536:ocdJjGlLpvhc7InS++07hciMIWcrQZhtybhYSiyfdYbPgvzd3efQQTU5aV+8H2wx:occ2IB+InWChd9fdYsbdDtsk3mGzfS

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2