Extracted

• • Target

    JaffaCakes118_6032b4e372ecf52d2760e9ab9dd19830

  • Size

    128KB

  • MD5

    6032b4e372ecf52d2760e9ab9dd19830

  • SHA1

    dad4a55400b3d8eb5b93604e95afd8a2fe42b580

  • SHA256

    cc91435f19259eeaade9d5f4ecaea23b6c0cb43e305fa6cb03a02d47ac70107d

  • SHA512

    906239217dde0f4759498aa1562cdca70d735f97fd8e2a10657add78e467819a51d5f891e250711679def46809f0e110566b53b7e426ffc9dbc0fbc53a3be53f

  • SSDEEP

    1536:yd/tjZWBIt3Riztr4eiUbAWDFkSlsYuGOJ5Em0GumZDz/N04Zli8VAqxD7FyJp:ydFjsBIRRuEBfWx3sFNziqnNw8VP9sJ

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2