Extracted

• • Target

    JaffaCakes118_676711b1025c7ef0f9cc0fd83defb6f0

  • Size

    115KB

  • MD5

    676711b1025c7ef0f9cc0fd83defb6f0

  • SHA1

    fdf14db965b698e452bb1bf07c8448ae28d647f6

  • SHA256

    eddb60bc27771a58127ab433564ff45d42e47f03d1ebce60dcb08e0646635f3e

  • SHA512

    8985c025a4f251553fdb3da87729d3b3ab55731cb450301836e7411f7b2f11d2ea5a5ae28263451b95b7e069a8faa18a6a31760e06e2bba570657f9b89c3cc51

  • SSDEEP

    3072:OGR6pAMei3QDFDxboP9Q/CdJlYnqtDa/H17g:OGspAwIFFW9JdPAZF

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2