Extracted

• • Target

    6bf7e1c53ef3739ca924fd4310db0a9e

  • Size

    196KB

  • MD5

    6bf7e1c53ef3739ca924fd4310db0a9e

  • SHA1

    47fab66b0c9ec112d1822e2b841032a90daf8e88

  • SHA256

    1108c8b61019ab5c076d37fd610e3d7b6be9996a45381218531dc725c2a3733d

  • SHA512

    fcfa1372be5264ea06853fe70fe6b38b7720826279958bbbc981d120cd7202bdda13d85b7d1b493754b53d1d586084a2903f4976d1d1075106615c5bf62a9e42

  • SSDEEP

    3072:iv2/q1zBj27p38TMCaiYnlikU4tLpRQd0UBKuF:y1A7p3NiYiapj4F

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2