Extracted

• • Target

    JaffaCakes118_54cc419cf637d50960424af3027f0d34

  • Size

    173KB

  • MD5

    54cc419cf637d50960424af3027f0d34

  • SHA1

    93a0c10e2cbc79019260edcf92ff9e123cec0bd1

  • SHA256

    18fef8c286599e7555d93304b5c7afc2d1ebf93cfd02d6a3714520c2f26d2052

  • SHA512

    64c4f9048ceceb0b87af6a504266d1670cbda4efa9945f1480fb41ef33774d894ee417409afb5b2030c5cba3b210dcdc239aa75f12e940567433b9e86cb6d5d1

  • SSDEEP

    1536:do+PRP9hI4dNIN1/gzyGQnnXvWpRivOUqhjysSIClysxPg9RgXJMB3QeNrW5Gi0m:dF9+4rylGQnNOUwywSO6MJvti0uKTeoy

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2