Extracted

• • Target

    1ae2b578e9600d8112be6068cf1c85c5b9cf7216deeb011e170015e96c7af045

  • Size

    447KB

  • MD5

    52349a0ecfceccd8b6f8063313c7795c

  • SHA1

    8cb557db9662b9d4605349c75c148773f8b96a63

  • SHA256

    1ae2b578e9600d8112be6068cf1c85c5b9cf7216deeb011e170015e96c7af045

  • SHA512

    8f9cd5f763baa203fa2bcfaec0d75eb97ff068c98e76ffc31d2c90bb5beb77caf7eaf793f1906c1c8780c10ed9d11e87cbabae67c777bea79b35cc848186d3b5

  • SSDEEP

    1536:pFum7foiQM569feOHQbQv48GbxRzqCqZKsUFwBcWIu8LB7LAwj+ybP/NvCAXm:XQZCafeOHjv81gCqkhwBA1T+yb3y

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2