Extracted

• • Target

    02687ac421b9e634924bb12a8483714ec3dca0df5677fbaebf88c2ffdcf18527

  • Size

    100KB

  • MD5

    248718ec5f967efd0fccd20e9e54cd6a

  • SHA1

    5a3f1ccdaa6e1a645c9581d9bd1b7c011979db7b

  • SHA256

    02687ac421b9e634924bb12a8483714ec3dca0df5677fbaebf88c2ffdcf18527

  • SHA512

    104e0059502ca22bd92ce9a2a6f3d95f5e1c86e59cab562dd8d3b64cd358f46081629f7068d557942a05902799ada732de303128c104b1b0a291fa78f08e7827

  • SSDEEP

    1536:PgCAwyaTQrgiGzOI8yuO5FMItdz6V4HuMD+dLGN5wOJSzfebrWG2P6vGw5qJG/:Pay0rUlJMItQPMD+1S5AWbrWGDvGwwU

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2