Extracted

• • Target
    78e7fcddc0b605dc50c6b9109fd723b35df72aca70a8159b78cec273bb72b9e4
  • Size 120KB
  • SHA256 78e7fcddc0b605dc50c6b9109fd723b35df72aca70a8159b78cec273bb72b9e4
  • MD5 4d3898518cd38e0ea105a7b663b8f160
  • SHA1 64b823b5c6f56f21d412fdacf6e3cca91c096be0
  • SHA512 5cfa2d0217556c6c58473c2b4a7ac8f1debd79b995b71fcfa6c6163ac3f1a9e31da3517bbab30560704941c3aabf2a197bf12510b4a04c4e662b77bc03fe4c5e
  • SSDEEP 3072:Odqbk5ECg9ehgXNCSlX+5oTVnPC/ooa5Ir:Nb6ECgUhg9boa
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2