Extracted

• • Target

    a0bf83fb4c8213f12926039afa948460bf9397e1e6ec93e0e68f7908b01e1ebdN

  • Size

    96KB

  • MD5

    2461e64be1812a2c6855456854c5c2a0

  • SHA1

    30bfd15634bd4ba1c550ca5e2e54c814ce138f3e

  • SHA256

    a0bf83fb4c8213f12926039afa948460bf9397e1e6ec93e0e68f7908b01e1ebd

  • SHA512

    4a045835509545662c912959224c24e9309bf6a73126595dc6bf02cda5f7db53dc18b6c43b1a96351d87c560255d7b66cbc0838adceb35566f6047b9ca737184

  • SSDEEP

    3072:NV8kcD69TjDEvxFqb1ITEY8TNqbJz9vIoIY5g:NV5O+nDEzqb1ebJz9w0g

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2