Extracted

• • Target

    JaffaCakes118_133b82809a2da03ce12141ab7e7e622e

  • Size

    173KB

  • MD5

    133b82809a2da03ce12141ab7e7e622e

  • SHA1

    762813ce5aa00d60e532e6d3bcb269ac3a481b39

  • SHA256

    0adf8531df3c6af8e1f6b6c321be3fa96e59dd9765fdf454fdb66ece0eb32e29

  • SHA512

    c18930c199db74d4478f14c1b8f90e92b4b8ca197af6899e80984817f68a5205146f4e381e5a60988e34b5a584b64aa276f3fea9535ac13f87a79fb186020b03

  • SSDEEP

    1536:My+L7BtXISH0BVpMNijUJKvRBq2EqIiQmLdhkQOSIIolysxPgC5FKDl0LCK2z0ux:MRXISOCwjUJ+4zmL0QuIM10aLU0uKHe1

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2