Extracted

• • Target

    JaffaCakes118_8cf6c1f555e86b1611592842a903fad2

  • Size

    161KB

  • MD5

    8cf6c1f555e86b1611592842a903fad2

  • SHA1

    be5ae7f05f84904355a56f7e7487b1dd89a2b5ee

  • SHA256

    fc58e71794f8a8b93f94897941f52ae40b9c2a540dc038f37b537a4e5446de08

  • SHA512

    dd0addf5d008b41d2d4a8af369d9298171a9c297bca41c68331c19eec2dce885d9dc9e18ae975c25d555943c264198b88794fab7a03aea16fd55da3633e2e53e

  • SSDEEP

    3072:kncCHELVseCkX6+Qd1TM15Zm3VXzur2ut:qcem5ZmFCr2a

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2