Extracted

• • Target

    JaffaCakes118_5643bc6c25bb8c0737d3a8c8175f696f

  • Size

    154KB

  • MD5

    5643bc6c25bb8c0737d3a8c8175f696f

  • SHA1

    b8faf6e6b52e482f389a4e86a006587b0dfad91b

  • SHA256

    a35f03c6320441214cca7e56e1cd8ef03993472e0ecaa9fb27a0682d1ef0fc72

  • SHA512

    efa114ec8c7c3945b29ebf8cec65a7c5ca47565c81a383f761a3c96b4b2ee64d6da57cbbb588bc43c8f96f27e53e7a7856b5430143a499e1d22b5335553739d0

  • SSDEEP

    1536:De04fH/VM+zPG66tyi3JegBzVHrU16oZ43Bmr21DZ7suwSz1Vn/1T38UWwMF2O:S04fHnzP4NegDUMoZ2w21NlVtT3B82O

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2