Extracted

• • Target

    JaffaCakes118_2b1ae3e893aaba48d89889c93c91cd9d

  • Size

    169KB

  • MD5

    2b1ae3e893aaba48d89889c93c91cd9d

  • SHA1

    e4401ef4365ec49a8c779038f84e392dcf0baf78

  • SHA256

    987e032fdc6f11a37bcf49129d0a73058814adebee32a1ebf5ac4eb096aacb96

  • SHA512

    9d5da90ca27e9fde2668112d605f4ed933510992a8870a0e7774acd8fdc387be59998cd5c419d2722df5391705836903612596fbc27a22d6a5ada0c9ac67e68d

  • SSDEEP

    3072:PQUBtAOCq9HpsSIsQrVom3dQVpcWWDAg/g:PQUBONq9HFIsQBX3dQVp5go

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2