Extracted

• • Target

    JaffaCakes118_5c93a1c6c2d2812c8970501a00cad3fa

  • Size

    149KB

  • MD5

    5c93a1c6c2d2812c8970501a00cad3fa

  • SHA1

    ecd9235c4eb8bf6e9e195472df892bdbef95805a

  • SHA256

    17bdcdbcc1ba28f75ded2b56a419310c4e670e946a9cb987e9ba4107f3932b60

  • SHA512

    9d58f36c3546ddebee77796fe0e524f97dc188adaf3e80ffa61da04b1a02e1e3d5472fd6ddde07682f2a230aeb09eecad4e33bec51a04a3acf0ea5a12ab62cd7

  • SSDEEP

    3072:auaYhZgLRxkstm6fE1TuU8A5Y3lO0GRKB:adYwR2stF8SUY3lrB

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2