Extracted

• • Target

    4d1ada6a834c4a558497d926514671c7

  • Size

    144KB

  • MD5

    4d1ada6a834c4a558497d926514671c7

  • SHA1

    c09a794c29bbe2d584cc5d81224ecb979170b65e

  • SHA256

    0fc1acc36e907751bdc37967ed5912ff3319575a32c5946c313fe1e880bbdf4a

  • SHA512

    b477e7ef7d15fa0bd14b5eb71336b9e79620d3ed6810d38f834b1e1302c335d5dc804b49220ffd0eef4d5f1b4bd00e211cede8af259f040a002291c02423d57c

  • SSDEEP

    1536:Re6wTEDBNFxUhGKc7iaBxOR2mAShTopW8b/87G2PXhBp7uRdEGtbJN3OQX1R50O8:RRPUtirxOkmr9op3UJfh/SAW1N3mOxG

  Score

  10^/10

  ponydiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2