Extracted

• • Target

    c823836ec856fb7018dd1d2724a1cf23

  • Size

    91KB

  • MD5

    c823836ec856fb7018dd1d2724a1cf23

  • SHA1

    3d178417a305ab4097e2ee0883b4f357b12b40db

  • SHA256

    547e7f8e666ca3e706a947bb51c8f772e30f598cedcfe9896a966543f064ce0e

  • SHA512

    fa2783b397e28f40a52d676512766e966663baf84e09c8761a22a9f070a7c0861267078254e2f87e1ab7893905f8931b341f66db3565a253fc9e4645cbb21cad

  • SSDEEP

    1536:VtNWr5pkF/dYjF0t/EQcW3qcdHQoV6dRTwgC7waV6NnHrbXFIU4DgInQL:VtU5pp+1cpc3AxPC7DOnXp8QL

  Score

  10^/10

  ponydiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2