Extracted

• • Target

    JaffaCakes118_12f1c78aacee8c64b1a460cfd43763f8

  • Size

    107KB

  • MD5

    12f1c78aacee8c64b1a460cfd43763f8

  • SHA1

    82aefd4053234fabb976fe2aecdf2f32ea4c0ecd

  • SHA256

    19627f291da023c2a9bf0ea007f4124c238a785e79c0389141ed4e9015c0b887

  • SHA512

    51970ea62b7d8793e51de4ebae3e7d24dc781c1bcf2c505282a3d5d472bbb37dfbb2556d085abdc222efc7db7d430e7711ee68b01bdd16ee4df18aaf5c75161a

  • SSDEEP

    3072:KBmZfxf2XYCFduNosiBck1dixYU/NMcQDmifBas1D:FfmTFdu9qcEU/+cojH

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2