Extracted

• • Target

    7a2883a3af9d9afd764a791b87b691eb382eea701eaf21b52c4852053a899de6

  • Size

    37KB

  • MD5

    81edecb831332564dd1ac0967e9773ff

  • SHA1

    71afe4e331f4b91cd7487ebcfb601be7ac3b7e47

  • SHA256

    7a2883a3af9d9afd764a791b87b691eb382eea701eaf21b52c4852053a899de6

  • SHA512

    451f5133e5db562604adaf24d308a10ce6d04f59b6e4f9c6d5db76b980a0e23878520919c473df33b2d5dba3b748db682346389facca802d1de3500b2c1786f4

  • SSDEEP

    768:dlU0HJ25v/EuJ82l2G8B2KW8e9aZ4xccqaY6G1rQcsclnbcuyD7U:dlUFyuwoL8e9gYccHArQcdlnouy8

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealerupx

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2