Extracted

• • Target

    JaffaCakes118_097bb64fb09371dc1df147a917b2dd3b

  • Size

    97KB

  • MD5

    097bb64fb09371dc1df147a917b2dd3b

  • SHA1

    cc9d26083d234af1205377c78550bdc46574b498

  • SHA256

    a130766197dd0a099e79161b697b4fc27e9c61eaef7d53fa3f8a1132a9e92969

  • SHA512

    627b2cd8c685de36ac2c5f793725bb0a81dc1b48f803030e06830d4e1a29a207f7972d25b1e5167db3c37d4ddcff0a6335559fc707d1786a935459372eaa9301

  • SSDEEP

    1536:Gz5gTPtasdfRdwI2tFmqx9t8Io+6f8/jgOGBfJEKrnenYeOyaLcgkRVW7yhK4tJW:EK8sByoqx9tvo7OfjmneYyKcgk7DF0D

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2