Extracted

• • Target

    JaffaCakes118_90d4d2ab0211535d612f43885d6b36ab

  • Size

    126KB

  • MD5

    90d4d2ab0211535d612f43885d6b36ab

  • SHA1

    4df4643ee46439ecb12759bfee5463afbda9166d

  • SHA256

    8e8e6bc13f0efc4f3d0d2d393216f771aca0197ea0534565aee73fa1c33bc8c1

  • SHA512

    48e5d3f7e167713d17b8e81b595ccf8442a8b93c72632689b13860bd481a565d111aa4cc9e337d9078654606628c3f83ea6b0531ebae9ccec62386d458a39280

  • SSDEEP

    3072:MNmIgyPJ2L66rLBov4dN8Ff7zK4XC1SDqc1yLrZU:MNmIFJn6rLBoQdAKHcDkxU

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2