Extracted

• • Target

    JaffaCakes118_66eb141278dbcad938ea70ad5458c150

  • Size

    129KB

  • MD5

    66eb141278dbcad938ea70ad5458c150

  • SHA1

    d3cc56902409bd38e81a884754549485b03fb031

  • SHA256

    5442d52f797f8d616d025d209626b00c839029a2d6e5935a7c9132f5140332b4

  • SHA512

    d4e9c2382335160a65de31302a3d36300a8141fa62ac2030bddb1c754b1ea750a1f5a8c35e1f2a03b7a00ad03ec64fbf2c748f846dad3b2e4ec44ebbc44f1c41

  • SSDEEP

    3072:Lqn64JDORzLIxEvZ6EFMHtyFTtn7m5SDNT+G:un/JDO1IAZ6EQ09ZmERT+G

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2