Extracted

• • Target

    e5e3e6b3fc98871a01ec668d1d9b040c.exe

  • Size

    174KB

  • MD5

    e5e3e6b3fc98871a01ec668d1d9b040c

  • SHA1

    a2a14c610cd5e169b7504788105ec37c1f7515cd

  • SHA256

    3887d3d133504bb41d03e8fd96539c38c3accaf5aa97f2948599a473800d0bef

  • SHA512

    4a577754a8dd6282bf155726a241fa89549a467f1d6ca19074cc0ac35e4d59f5bb5134ed032a6ab9b14ad8eaaa3f813ab538c1f3a2af734c5fc0cef0cdcff34d

  • SSDEEP

    3072:EorjHktzHeO/3wBP/n61FAMMnVv4L1LWxxjOm:hr4Hv5MVv4xLWL

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2