Extracted

• • Target

    JaffaCakes118_6e6cbd7190cbbc96574a184809e78950

  • Size

    119KB

  • MD5

    6e6cbd7190cbbc96574a184809e78950

  • SHA1

    e856c2841523ee994426f6b1e7461f0ddcc7f2f6

  • SHA256

    57849ccf4b7a656216fe6b1dadf4c1a7a8469d8a0ca70be63f87aed30914ef5d

  • SHA512

    044111abdb3d0330843750346dd1185327efa8ecf21b809caf79f9e6c3189b0ed85729fc5011bb32c8563bd8f78d5ee14f98dc1dcc64e8b6e374663915263b1c

  • SSDEEP

    3072:rcgWZloPyok8FzpIMrD3sx5eluH8k1z2BHgMaEIb:Vg6yOz6Vx5eEL10GEIb

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2