Extracted

• • Target
    CEB40B25F6CCEFA258CA5E9DAB520E63280FBB2FDCB2C.exe
  • Size 172KB
  • SHA256 ceb40b25f6ccefa258ca5e9dab520e63280fbb2fdcb2c9cf89df17defd3b6f24
  • MD5 2613bf1100c3ea4e7d505377e9935bc5
  • SHA1 71903c3e5160b083f004a2f993aec373a458382f
  • SHA512 99ec576604447c2c731a06d8b6c336167a917b24b94a5e2a16907f89ded6670e82d2ad0ca0a24c88bbadd9450eb2f3537322949ec7523c54790a6c16ffd78989
  • MD5 SHA1 SHA512

  Score

  10^/10

  ponydiscoveryratspywarestealersuricata

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • suricata: ET MALWARE Fareit/Pony Downloader Checkin 3

    suricata: ET MALWARE Fareit/Pony Downloader Checkin 3

    suricata

  • suricata: ET MALWARE Pony Downloader HTTP Library MSIE 5 Win98

    suricata: ET MALWARE Pony Downloader HTTP Library MSIE 5 Win98

    suricata

  • suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

    suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

    suricata

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2