Extracted

• • Target

    257495d5bea8ab6d6a6cec11fa3007905bbc16f67708815e17cfe36a5786001b

  • Size

    102KB

  • MD5

    47e2514bbf41167201d6072179fcef84

  • SHA1

    9b85032eb9b6e30ed35ffc62eb5495395341e963

  • SHA256

    257495d5bea8ab6d6a6cec11fa3007905bbc16f67708815e17cfe36a5786001b

  • SHA512

    00c54a969b8c7ee277f16ae310460994f4cdb9c71ba0bb745df1eb1ebca696031e6268939bc6ec11bd13b024632023ffc618da277d139b454c97d4bff611b66e

  • SSDEEP

    3072:a7LpZN9legORl+VnLXSGx/CO4uk5X8OJXem:a7nflepmVnDl5COK5Ms

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2