pony | 5a0cf8a63f38d1f2797ff223048817a37851b2b10496189dc8285ef5e0aef37a | Triage

Sharing

General

Target

5a0cf8a63f38d1f2797ff223048817a37851b2b10496189dc8285ef5e0aef37a
Size

68KB
Sample

220724-cglb8sbac9
MD5

78515bb8d8c306e9955b3595c3ca1919
SHA1

e5d423b7d57de6f227818b4da4e009b32a45f5f3
SHA256

5a0cf8a63f38d1f2797ff223048817a37851b2b10496189dc8285ef5e0aef37a
SHA512

7a03e859d432306b49efe79418dbcd3c821f12bf894a4a476bee92fb9a5a200c30f62e4884f4bbcaa87e47b24eda89149f84e24a292e6a775f7d39a60c5d01e7

Score

10^/10

pony discovery rat spyware stealer

Malware Config

Targets

- Target
  
  5a0cf8a63f38d1f2797ff223048817a37851b2b10496189dc8285ef5e0aef37a
- Size
  
  68KB
- MD5
  
  78515bb8d8c306e9955b3595c3ca1919
- SHA1
  
  e5d423b7d57de6f227818b4da4e009b32a45f5f3
- SHA256
  
  5a0cf8a63f38d1f2797ff223048817a37851b2b10496189dc8285ef5e0aef37a
- SHA512
  
  7a03e859d432306b49efe79418dbcd3c821f12bf894a4a476bee92fb9a5a200c30f62e4884f4bbcaa87e47b24eda89149f84e24a292e6a775f7d39a60c5d01e7
Score

10^/10

pony discovery rat spyware stealer
- Pony,Fareit
  Pony is a Remote Access Trojan application that steals information.
  rat spyware stealer pony
- Reads data files stored by FTP clients
  Tries to access configuration files associated with programs like FileZilla.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

ponydiscoveryratspywarestealer

behavioral2

ponydiscoveryratspywarestealer