Extracted

• • Target

    46b92588803d3411884bd4042f98a2591131f324a14d0d39d18bf7c22fcc3bc2

  • Size

    113KB

  • MD5

    4800424bc890ed3053a61838deb0868f

  • SHA1

    6413241c68a74ebfc715c41e7af6081f367ced9d

  • SHA256

    46b92588803d3411884bd4042f98a2591131f324a14d0d39d18bf7c22fcc3bc2

  • SHA512

    8fa16d56b27930f08ff05b4305dc061cd3bc61e757d0288ca05070c32ae97675a071687dcab3f19a0fd9a6a7ab7385d8f473617dc794c56192b698737b5e000f

  • SSDEEP

    3072:OJPsu0el5clsBd00AcMYcRBd3AXzqaLYuu:g0ol5n1MxRBqDqoYuu

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2