Extracted

• • Target

    JaffaCakes118_6d45c29bf430f2c344b5186e9e1cc520

  • Size

    130KB

  • MD5

    6d45c29bf430f2c344b5186e9e1cc520

  • SHA1

    0e41360747685639f5caddbb3585decb330e43ae

  • SHA256

    56c61f1d70490f163acb37cd587b32f560a582f06b6010b05aa7dee336ac6b61

  • SHA512

    6c9575943de6e89a0dee0b73ca428917d31d3f223d587e9c440e5d1893075ae6a38223cfa9d2dd9a70b5acda49c6c745c433d85fd0eba5f40f1df11cba2f671b

  • SSDEEP

    3072:3JqZJIYdZ+1+viXzM0VZD1RP/XU/UKKUcjCHevb0:5qZJIYdZ+IviXYcRnU/U2cjCx

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2