Extracted

• • Target

    JaffaCakes118_90e0868d4b9ac3e0ef049d73ac33557f

  • Size

    34KB

  • MD5

    90e0868d4b9ac3e0ef049d73ac33557f

  • SHA1

    0bac0ca1b9bad07f652e8fdf341feb7eab11bb28

  • SHA256

    24242fed4af8e6406d741c669fef85cff6351da85093ab41259775616c3337ec

  • SHA512

    045052a1bdc04f88ac4c497626ead3075c14fb4c0b6c8f00d7f6c1d1044ab186865913b6ee74711a3bac5a0157dc48403dd1f7a498c498bb9c5d2942e6a2ec24

  • SSDEEP

    768:SKLKaw0jDHz0rO8gL0TiOwjDRSINTTwpjwDYsQsL8FftJl2:S0O0fIcLWiOwjtLTTwAnQs4RtS

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealerupx

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2