Extracted

• • Target

    7cafe446247830bd986d3c614f444ce1fb390a65e32432b1c0b9ff32361c7365

  • Size

    134KB

  • MD5

    93d9a4f79d8141d81700a11bae3ccde0

  • SHA1

    3dd2a5e629cbada838114614ad22b729f8230484

  • SHA256

    7cafe446247830bd986d3c614f444ce1fb390a65e32432b1c0b9ff32361c7365

  • SHA512

    9f5ab8572312e46f86ddaed65838cd1787f95a65ec9e8af17c94df60d83ea512bbc3fe22802ccb34bd2dc8d5c0ff0da26ef40d8ae8a1c3a5665ff73daf3be7b6

  • SSDEEP

    3072:RA9mjxHJrPFW/S+jm02VdfN4BG9d+MjfG7YatlWi:S9mFxPFW/Hb2VdfiB6LG7xtlW

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2