Extracted

• • Target

    JaffaCakes118_6deec6dc061c959a0f8813c8ca29d6f3

  • Size

    179KB

  • MD5

    6deec6dc061c959a0f8813c8ca29d6f3

  • SHA1

    f53cbc08cb5d11206d90a3fcfe5b5c8e5f953db7

  • SHA256

    a38fc75cde5c2b3a192dc2d763f9f6d4fe179dc096d7725b2662eaf16bbe6572

  • SHA512

    650dc6da6a5babd94d3938e0a3a10e9f94ef4a6a74c3c2d07555035d3f480140c0a075837b14715ee849c124f75d9ee0d89bc683cd5fd66413d3f9dcdc419a1c

  • SSDEEP

    3072:3dJvLt99mETK4C7cm5PlJOnVFhNsQTrC8gjkx08SQwiwFwgwqrD:3DLtXgcm5tJEFh/rC8uCdwiwFwgwqf

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2