Extracted

• • Target

    b683a9f2254f142cbc4f80352a6d736a

  • Size

    172KB

  • MD5

    b683a9f2254f142cbc4f80352a6d736a

  • SHA1

    660bf074988909395986ababb1885cc320008b02

  • SHA256

    357aa5280b9db478a947401067824eddf89e01148dce33ab05a6cb38ceb4c073

  • SHA512

    dc64eb4154622845e246a35b0f5b9d1328acbfde02467bf570cb5e6f2c4374a1c800647cb92d34b385a9c875f5463c9ca7653f948e2251f6de6b1f62592dbea0

  • SSDEEP

    3072:3pXwXbzt7/kk95u/xiepdd0tAYF3DaW3BVmCUsKEeV:SrRTk25uJ1pf0nFzaMBVmtsKb

  Score

  10^/10

  ponydiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2