Extracted

• • Target

    JaffaCakes118_431987fb48b68dda93c39bc65e3f4c20

  • Size

    123KB

  • MD5

    431987fb48b68dda93c39bc65e3f4c20

  • SHA1

    467d06ca5307bf330ac14f4a976ce1ef5b4d76f1

  • SHA256

    3448a366fa66fa641bd6488d49bc9d3ea690718250e890a5972439b79b67d488

  • SHA512

    4f2f70432b2fceecdd9c277b10892c39bab835def908fa1ca4e7fc2f721e76ca366fa1a50bb58ece3379b625fd491df63f2be75c9cff320330d83a1da7b12280

  • SSDEEP

    3072:Urb2LP7jd0hb32WOr2DYhVw23S0qdGBg+Dv5ZN5V:UGXGhbmWA2EhVPijdPwLN

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2