Extracted

• • Target

    JaffaCakes118_36adab1c502a93f9264971034f3f13f2

  • Size

    149KB

  • MD5

    36adab1c502a93f9264971034f3f13f2

  • SHA1

    b5f389ab473a68d28ef5a829a752d9cd45aa187d

  • SHA256

    383807fb6d99118e18c51d9cef3931721f893ff7dd06be5cca284653a46c11af

  • SHA512

    602b99de4cbf5f5b784a3fab1cd082170ceaa2dae6aafef3a611c67fb14919630ecdebb9fb8b601792b59cdd5e5131db4137b1ef2cc39d95da2283bc54a5451d

  • SSDEEP

    3072:tuaYhZgLRxkstm6fE1TuU8A5Y3lO0GRKS:tdYwR2stF8SUY3lrS

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2