Extracted

• • Target

    7e262807f07c85b369a8137588b251d343f66c78ff5a38e57ee329e68f888d4a

  • Size

    119KB

  • MD5

    51838a56779b344b7cf545d2e09851c0

  • SHA1

    ac1867738688b4d8f7f5c91d74496581679af645

  • SHA256

    7e262807f07c85b369a8137588b251d343f66c78ff5a38e57ee329e68f888d4a

  • SHA512

    d17d05c1e411de9d542ee8df585c4ee830a2855c5873df8078cf08464885824474e08a9b4415431d9444b6de47cb6c243d5f92ac2702ca1630fbf520395d4867

  • SSDEEP

    3072:FR5J6u30H1HPQpoXpZnEjyyIe9L9fEKx+HCzPLT1x:R8u30pPQcZniL9fqytx

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2