Extracted

• • Target

    7239588b4480f212b2af97e5c7fc2a7d

  • Size

    127KB

  • MD5

    7239588b4480f212b2af97e5c7fc2a7d

  • SHA1

    c5699a4e629a571c3b77af9f249abdfa4c4dcaba

  • SHA256

    75db7b59dd91a394cce2acf24ad472543ffc4934cd305dcb6709be2ba99d97d6

  • SHA512

    72a3d91847e637674956b5b58142ab50323ccb5a91d0499ddf1bfe4c53fd958fda3fcf53b7c1a05eac6a6495495043523baa354ae21dfc7a04fd3bc650aeaf86

  • SSDEEP

    1536:U+7xOzwNiy4cjZcylVQ7g35N/ihOOZKFFX3YSIAhBlysxPg9RgXns+MXeo/lGW55:szwx9lVQE2OOZ0X3kcDOZ+Ktki0G

  Score

  10^/10

  ponydiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2