Extracted

• • Target

    799b7b21e43725d2b667a05309f8c1b1

  • Size

    160KB

  • MD5

    799b7b21e43725d2b667a05309f8c1b1

  • SHA1

    10212de023750f56cf4d1fffec34c42ad14b63ac

  • SHA256

    39bf86702a7b7a415505b0c7ce6112f0837b06de56b3730cead46c3712e10792

  • SHA512

    f3e20ce8bb8e0dca620857ebd9bf3383f52d9bae9f2d589150848a7c47b811f022f0aad288c65629c9dbdfd5bf1c2811f0921a2aa277a05f01edc727b7288bf7

  • SSDEEP

    3072:RIca60GxMymhM7os3jSQ7rABlBz4/6AJjfk8SXLQwEQ:RI0jMfS7osOQ78BlBzrAJsXcBQ

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2