Extracted

• • Target

    2a7b19a87d8fb51250c21433367693a49dcf00b17cd1fc5ff4c5478ab1e22058

  • Size

    114KB

  • MD5

    1af19eb3f1527f2a93e785f88722a900

  • SHA1

    b207e857eb8fbb021c691af3d82b8bbcb3251d83

  • SHA256

    2a7b19a87d8fb51250c21433367693a49dcf00b17cd1fc5ff4c5478ab1e22058

  • SHA512

    fdf657af7f148c5fb55ec5ed7fbf892d51c6ce511003b9d93d834ef741fd717e7cba4c6bcd1d2e0fa6e8d85de83e7edd92da652bc338417208ac92f0f6e7f6b6

  • SSDEEP

    3072:Sl5ykz1n1DM0kYqMnFKG7J5JysF34CmVrCeIICNC4A:vk5W3nmxysZmwJ+

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2