Extracted

• • Target

    JaffaCakes118_52d9e409b2766fd1a9b1c5486543c878

  • Size

    178KB

  • MD5

    52d9e409b2766fd1a9b1c5486543c878

  • SHA1

    9e17f4e1ffe2a31fbf007cb0bf6d9d98cf4edf3f

  • SHA256

    b2519e6f642d2854b729173ce02928c1a27001db2b93ebc4ab0b71660bb59336

  • SHA512

    55293590f5a6e04a82fc0660c0497b6d05af9c3a811c041b8561c6e0e26b7ea190f22631e141c7d4405ce3c60beeaaca1d010ed2cf58cf2a84dd9145679c234e

  • SSDEEP

    3072:b71eji5yoSfDGPPfRWtbBoj40dZuUAE1br+R3:/Aji5yoSfDGPQtbij1fH+R

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2