Extracted

• • Target

    JaffaCakes118_3b121006c4bd66f60be942a67ca9ff34

  • Size

    127KB

  • MD5

    3b121006c4bd66f60be942a67ca9ff34

  • SHA1

    fbe222631ac74a44e6e326005a100c0044cba56f

  • SHA256

    a4ec799189dfd7b564a2b6e03913e0c3ead687e2483a9a1f15baa25d58a05fe2

  • SHA512

    1f72be7ccb39c1f63149ede8270a6097ad313b7e0f0d3eab2fe87e15427176502de9310e993ffe0e379b31b1ed8721a7cc8f19558eafacf5ed7a2942a8f83ee1

  • SSDEEP

    1536:k+7KbB8+7qwtkO9X7vArcmqHViVpG7kyRe3tSIllysxPg6fCKUA3k6oWv3kpN0kT:OB8+g8X7vedG7Ne3vP/oWk6ok3kpN0kT

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2