Extracted

• • Target

    8a27231aff22688a881487c679d1bc37dcc5a4a6089f46ee19bbf47855d7baf2

  • Size

    114KB

  • MD5

    1d6580ff1e245e6a35f382940c684b10

  • SHA1

    b088e5b323bc9df5a2d035701b173cdfb7db57bc

  • SHA256

    8a27231aff22688a881487c679d1bc37dcc5a4a6089f46ee19bbf47855d7baf2

  • SHA512

    35b80ad8c08fb5b0db350c7b9a018eea7a86e296f460b6a0fba36d80beb850bfa0d82665d2561a179e048fbc6905370d86e8ff7714aa437269d3d105cddb8186

  • SSDEEP

    1536:QNU5DUpb4N+A92pfei7qVmRFTWJ266DZUz981MRVK/uyQZUasiWg82Tx+KMK8:+eM092M+gGiJYUz61mVKmyNas9gl

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2