Extracted

• • Target

    JaffaCakes118_632e262fe2476cdece213f683b0171d0

  • Size

    117KB

  • MD5

    632e262fe2476cdece213f683b0171d0

  • SHA1

    9490c083c7f5ef8c0ba5afecbaf05999b984698d

  • SHA256

    fe9c251a5cd4b0b2f85cbd4420f7270773a7c288694933967888a4a69f025e05

  • SHA512

    fcf71c7c1898c51a1a331ecbd2d7906c498b8d8049cf387a884842b84ffb54b984b00cdc582f29fe4b5cd9ebadcf0bc2c9521d0d245f6a25cae0c57a851aa2fc

  • SSDEEP

    3072:2pqvSqwVL3YnsC7fIFaOlaXoqaeKi0SvogY95eZ:2pi6h+P7wxeKi0SvojA

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2