Extracted

• • Target

    JaffaCakes118_26e2fc39420d52fed26109c13a67aef9

  • Size

    196KB

  • MD5

    26e2fc39420d52fed26109c13a67aef9

  • SHA1

    265e7beb3f215492ab44ac34c0df55e4fb59cc60

  • SHA256

    6095958afca154c06cf7087ce1279afa9fb0921d281d3dc7dabfbdbd11a270d4

  • SHA512

    2798cae2391a56852e9a1c64b381c23db37a07321675a8f55a5bb28a09333845a3bca7442b1ec3f964a01348da5e4b864bcb8ca01c0a25a363fe4bc65ddb57a2

  • SSDEEP

    3072:letj81dibBYjyUgC87likUjFwkRlIHaG1kKv:71EtBCIi9lkXR

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2