Extracted

• • Target

    792b075b383e6c14471231b4dc512f40e28fce5dc0dd60dfc34232b24e8f35f0

  • Size

    116KB

  • MD5

    800f4338c342333f9b4c58deded8f320

  • SHA1

    69a0049f55016acaecca604e16ed2aaf74809772

  • SHA256

    792b075b383e6c14471231b4dc512f40e28fce5dc0dd60dfc34232b24e8f35f0

  • SHA512

    c7a872a7f9bcb608277ae31adfb5c2636861575b114368ee9bb605f2c081975bc33983a7d46b1393e621355739bad04538f8eefdbd748106edd0d42662944ce5

  • SSDEEP

    3072:QI+4ZVecIeuvX2ATEbVkcAi2KBoTsRCJOr9sYH2fl:5s5fjT4Wi2+oT+Y4sS

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2