Extracted

• • Target

    JaffaCakes118_93ec42e403724b5cd6f2d4ef5b3d6cd0

  • Size

    122KB

  • MD5

    93ec42e403724b5cd6f2d4ef5b3d6cd0

  • SHA1

    e86564fd159d25c641e1e79a0d950b018087320b

  • SHA256

    46c9f3f567ede710c7e4a537b37d34324cca13fb686194a675cbe87d116de2ae

  • SHA512

    6dc1fdeb85475df7eb0c4b15c2bd2797996582c7b28862f18bbf6002a5d50c4a1227ea8a04307bfcdd5a797c1727a631e3f2e07b88bd949ecd06798297281055

  • SSDEEP

    3072:hppLk1HvkcbsjfTD923qhXMyAeovvQfA+xOOh:hppLk1sN2TxvT

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2