Extracted

• • Target

    JaffaCakes118_2c1af7cbfe14564423c176e07756ffec

  • Size

    188KB

  • MD5

    2c1af7cbfe14564423c176e07756ffec

  • SHA1

    0ab6c9d46515f464ecd2cb9f75923fe9fa9e7069

  • SHA256

    07dc0494e91ab9e411f56843f173f0aeaaf1c4d314812e1ba096df38626d416c

  • SHA512

    0a5bfefbf2baf16d3a7fe81398e892c836070cc1cb984b482f46e4f9261c6e4b1834b1e0c750722653fadf9b2744c75ac3a6a1e3d2376b6b1924968b94920cb6

  • SSDEEP

    3072:ZxnehmxjaU6/EL0/JOf0UedqBr45VYV1Qh1juqUvmmS:Zxv50ROfSqZgmVmamb

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2