Extracted

• • Target
    BFCBCA61FAB1CEF5DBF2944B30369FFD5FDE711A3067D.exe
  • Size 1017KB
  • SHA256 bfcbca61fab1cef5dbf2944b30369ffd5fde711a3067daf1444ce4ce987a5963
  • MD5 24c7eb748e4444c4b4a9b7589b016bad
  • SHA1 c9e6acb10c593eae649bb551248467444f77737f
  • SHA512 f9b074525bf8d5d66ef1d64339da39e7cda3385629f3fe595d0f08125afb479e1e69aaa7984ddfd16c39f6bdb8e31d0b74b036e805d767890925fe78062f205c
  • MD5 SHA1 SHA512

  Score

  10^/10

  ponyratspywarestealersuricataupx

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • suricata: ET MALWARE Fareit/Pony Downloader Checkin 3

    suricata

  • suricata: ET MALWARE Pony Downloader HTTP Library MSIE 5 Win98

    suricata

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2