Extracted

• • Target

    JaffaCakes118_7a5b7219b01cff14bed0b1c527c3e150

  • Size

    107KB

  • MD5

    7a5b7219b01cff14bed0b1c527c3e150

  • SHA1

    687d2537b20e7f1f50be0fae8a6cdb20fccd06c6

  • SHA256

    d188144d7550e39b993c2bef3a17bd7c94d4af49d2bb2034137bf5b4450e76fa

  • SHA512

    927da5ddd8acca5e412600d1bb17e732619d7cced2a5cdcece78b4153adbd0b6f0c9ebf560b56f97ea16df2e6407f18d370bdf84dd2e2c28ffe48988dee204c9

  • SSDEEP

    3072:5tmOoAk2OzPzTsXEaGp3l6MFMSGdSVpenF:ax2OzPvsXEaG3l9FMSGdSVC

  Score

  10^/10

  ponycollectioncredential_accessdefense_evasiondiscoveryratspywarestealerupx

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Drops file in Drivers directory

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Hide Artifacts: Hidden Files and Directories

    defense_evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2