Extracted

• • Target

    JaffaCakes118_6dd16846014217bb540d76c4dea3bcba

  • Size

    97KB

  • MD5

    6dd16846014217bb540d76c4dea3bcba

  • SHA1

    ba7fe8707ef2c9b1ae401402e5c475dbf29280d6

  • SHA256

    108ef9bcb5499e1f4e4a0cf0164fe10d4e4c6ba306082ce28977c25566ae954e

  • SHA512

    970c15744a6e9be61f510fb4f2ebf79951260ce4a200910302888b819f091450618ce0fab6bf1434facce3736e5781495d05d0d4d9e76d9dc0c0575fd8932f4f

  • SSDEEP

    1536:Tz5gv6Z87SPl+uruDB48a8evLA94W1KS0y7MFrynenYeIokNihWAky4Az+bKgw:HiZWuDB48aJvsbBvYyneeokIEA+Xw

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2