Extracted

• • Target

    JaffaCakes118_3ddfbb1aeef7dcd45d2869d8b8b89ed1

  • Size

    150KB

  • MD5

    3ddfbb1aeef7dcd45d2869d8b8b89ed1

  • SHA1

    1a2bf02c7f07d93aab29ee8094b37070d2e6a9d7

  • SHA256

    0710720b4a0fb3b47e99e37edd01a74ba046636be27766588e7d1a1ed299bab4

  • SHA512

    ca2ca96c17aa4604898f91c9d07bea0e9d8023be5ed1d672cc85077078d9e8bf15211be7e368e80d9c59d8c5dc6ff8576d624e858ab4ea0b62db0d7f7f9c31ce

  • SSDEEP

    3072:etbRge2HcoJmNNxxMY/X071Gx6KsgVLBj7pVNK:et6emmrzxsgLBj9K

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2