Extracted

• • Target

    JaffaCakes118_29507c9032ecc443f15fc74c5d5ea82c

  • Size

    150KB

  • MD5

    29507c9032ecc443f15fc74c5d5ea82c

  • SHA1

    0051f373a8eb83954c1bf388cb3fa633c7b6b0a9

  • SHA256

    0b4433138c187a54a6664887a0d463e6ae1a8f921001f21282d8fd6525ccacce

  • SHA512

    07599e955982affd68f6787ec9263f493dee35b0eec5d5599be73a8be803f6112b004b1bc351e52d82de37c09302dd16da7c43a535c7e51d6a1148b849af1c1f

  • SSDEEP

    3072:atboRg3HszTF6Slrkk03A4W1MdLhbV2UW8wN7:at4gidKhZ2UW57

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2