Extracted

• • Target

    JaffaCakes118_639e6f00fa935af1c994d02d1c475ea0

  • Size

    117KB

  • MD5

    639e6f00fa935af1c994d02d1c475ea0

  • SHA1

    ecb8fbd23800d081635a2aedf46216ad2de863b2

  • SHA256

    452eb1467c3c406311209c822cb3f6f5c0164d2c62ab68b1c9b89f79a943eb1d

  • SHA512

    af540aa18a02485535ae19a1c147dcee12a276d420c60e87f76abbd13bad90279273da207a07a08b4f92c558fc6f420fe226406ef3b8545ac1055f1fc1b1e0dd

  • SSDEEP

    3072:t9G8vQ6xbmYiI41sOwcqs/kgXN58X8QU9:t88b1iI41sOwcqscgXP8MP

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2