Extracted

• • Target

    ac92a1c6f54dfecaa5da8bcc61944421

  • Size

    97KB

  • MD5

    ac92a1c6f54dfecaa5da8bcc61944421

  • SHA1

    69cdad2f244f13f60d4eefa37d629a411fcd8a28

  • SHA256

    2a435df53140cc533f0ae64c6e4d08e850099e19e49278bbffbe3a5c86aaf460

  • SHA512

    6f664830be592aa1eb79b54dae2d38f180b830350bb1f7fd0604a71b55d34a62ed0816fcc25fefd4c223988070a26ec5b2ff985bd21f2bbfcf9e7311ee1e3509

  • SSDEEP

    1536:IhWUBVeeGAOrcuWvsTnGM278e/UBL8xmEfa+XZBVubzpyJrnenYeOyaLURdxyCtb:+jvNjMO1/UBLumszPHlneYyKUVF1cy

  Score

  10^/10

  ponydiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2