Extracted

• • Target

    1680f22f6e582b9b81854a88f7eac3ebcb4420568f62cc5486fb3c8284681d91

  • Size

    132KB

  • MD5

    6c6299ccb86ac40a5c5dde661d18eff0

  • SHA1

    42e1b58f90602e010a748b2188e76012fe145c85

  • SHA256

    1680f22f6e582b9b81854a88f7eac3ebcb4420568f62cc5486fb3c8284681d91

  • SHA512

    6890e03d31dc4875a565f64536a975919c211f61049bc31878ad5463f3fde8f2033702710691bd404c91d18b5e195d385e49ed2e5885b779a852cb42379afd97

  • SSDEEP

    3072:NZUhuWtOW9JDxlfZWL2L2PC94jax3gQaVlheP:suWJ9J97k2L2PCejax3xaeP

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2