Extracted

• • Target

    JaffaCakes118_2f7bd69dcc39f4196da31303388c1423

  • Size

    127KB

  • MD5

    2f7bd69dcc39f4196da31303388c1423

  • SHA1

    23d9e62674c9337685049c08c5e3702c8fc42edd

  • SHA256

    8b69e6af4e6f724285be0ca5ac908d661f7e5b22207b08e876aca4b791e36077

  • SHA512

    ce71eb8e76f543c07401fae91a246bc73bfa189ec927bfe89598b5714a7a7dba102cbd954be76bdae598d6bfcd856d20bed6819557e8dd1e77f8b52024c3d35f

  • SSDEEP

    1536:/L+ISI2drBN65QLI+QcpXhWQ0JpiZ1uOc6Es8SILNxlysxPgqgHKRaYvEGt+40k7:/R2BnmcpRWg1uBsALNT8tYdo40k7

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2