Extracted

• • Target

    75ce8ef049c5ac50735ce96bdbc2fd76b4ae22713cac6490d20b582c732e27fc

  • Size

    91KB

  • MD5

    79a33d689939b557adfa517b5858dd20

  • SHA1

    b290d5e2be308667c96a5029821fc59be51cc88e

  • SHA256

    75ce8ef049c5ac50735ce96bdbc2fd76b4ae22713cac6490d20b582c732e27fc

  • SHA512

    562a01af8d4108bb3853aa14e455a1f3733fa331c4756922ad57b348b1d584f529257c82e114276d0bae7eb21f54d2ab5eec29bcb1b9b6250b078c5cc4d50f87

  • SSDEEP

    1536:mNEGOmG7Gf4qTB/UBbM6QFZrz5Eq1CRylhOwcPTvMKkzb6/l:grJGQlFZfuq5hOwF6/l

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2