Extracted

• • Target

    JaffaCakes118_2a6955da5df9d5e7d96436fbb794a228

  • Size

    130KB

  • MD5

    2a6955da5df9d5e7d96436fbb794a228

  • SHA1

    1531c001411fd279a523e153b5656c8536d32cbe

  • SHA256

    a7b5a96f9e363da6ad6a3977ca8c48629c73ce47af2278b5f5c4918c3108faf8

  • SHA512

    a72972d8789c7ff175de650db26f974b21b0efa36eef02596ef242c7ad28e6bb8307fa74aa90807275073baeae7b572d30581c8d95c84b5405bc72215a0909f5

  • SSDEEP

    3072:P6soD+rIVF8MTLWsjUf+C+e1Da0DK0end:P5J0VFNTY+gDKNd

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2