Extracted

• • Target

    aeb0b2ee75d51c30e06f58f135eeff079b592ca79f4d2a911a35068a7c5486b8

  • Size

    118KB

  • MD5

    703c545294c45a99e5da5eaa2cfd7710

  • SHA1

    faa66fd28ac8cc9484efdf0fc507dc4f5be13c70

  • SHA256

    aeb0b2ee75d51c30e06f58f135eeff079b592ca79f4d2a911a35068a7c5486b8

  • SHA512

    842bf4acca02ac8951ff1f00e9f7b76abff17813aa5efbe6133247eb05e9f438bc0881fa53cf0e87bcdd6f9b8844f844edd03b057d294a7646318e9546eb3c17

  • SSDEEP

    3072:hVxWLfRu+Vm+mMJeMcN8zo9s93KK4JppVe42zefflBiApX:XGfRvvm66NHHHXp44j7tpX

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2