Extracted

• • Target
    1a2211aec6c3e5e27a67f6907a7611f5.exe
  • Size 92KB
  • SHA256 c1be3c17f856344daf7ab2ad08074e94145f371698f52bc93b5dde4030c53f62
  • MD5 1a2211aec6c3e5e27a67f6907a7611f5
  • SHA1 169f9ea72a8cc089614e74353240dc57898732ad
  • SHA512 50d831fe66728162ea95703ccb5c3a7a1a3e286301eaac7a0f55f903b232e357231daaa38bd93c59b82f2e46e69d4eb5d001b44b84868b9e89885c8e9db90a81
  • SSDEEP 1536:n/nzp0YL6qTSC9UGBzmJr4A4ZrqYBmAE4KA9JOnJOBfTvSkzbk1S8/b:/z6aIImJRbOBzkt/b
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2