Extracted

• • Target

    d186aa1e2e3e2691852fcc2a63aea0b0N

  • Size

    190KB

  • MD5

    d186aa1e2e3e2691852fcc2a63aea0b0

  • SHA1

    b33965bf1759e88e246cf8c4dcba3a1b625e2a78

  • SHA256

    754cb42706c9b711e3cf8e94f51062f23daac5289346224302fde39ce56aba25

  • SHA512

    91aa53697f3a6acfb900f59fe0e831a340793cd235dbf50269207c8eb51a3a2fa2c76f3da90375af1b233775360ae008a4a1e681941cab565ef14fe76bf7fd4d

  • SSDEEP

    3072:ZKDy5pCBk9nkc/9EjaSLxk+ZoKC7Q4r4+o/30SH:ZK+5829/9EjaKx5+7Lpof1

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2