Extracted

• • Target

    JaffaCakes118_69de1b64b500707d928d5cdf12935ef4

  • Size

    125KB

  • MD5

    69de1b64b500707d928d5cdf12935ef4

  • SHA1

    0a4ecaf461ac08762470b312c8cb80f9c3cff063

  • SHA256

    679f08bb7c7c84904c86a93a45081e64dc382681beaee2f78b0a75fa47d292bf

  • SHA512

    7f61d9606d06c885349de17e816e366fcd69f19ace823707aa60ac59d7bf06ca18939957dc142c9a7cba50a3e0880307af2e0fd9206514cbe67d13435865ff13

  • SSDEEP

    3072:TUjjV3rMKMD2qDUW2mCY3IltWlwuoIRd7MjRM:TUjjJXMD9gWBzkioA7Mj

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2