Extracted

• • Target

    JaffaCakes118_69c679ad52d0b8283048827ba52c5c60

  • Size

    117KB

  • MD5

    69c679ad52d0b8283048827ba52c5c60

  • SHA1

    ccb83246a93f7c429d5cb3e0d3d7a265818d344d

  • SHA256

    e5f4f8fa60e6d5f3d1a786306ce8b8ea25e8cdb02c6dcc55a5c72dd23de3399e

  • SHA512

    562bfa71e738170c84ab296812737e68232ff9e35ab2258a95af25a1d7bd698eb9870e379f9ea0510d80930cea68f58a6b13fbfc89b81f9f626895025e627a74

  • SSDEEP

    3072:0kq0rPWn0w6VpRFm2g/9orUBX31SRE8e:Kd0w6Vdm2g/9hFg

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2