Extracted

• • Target

    82b3c8f1a3eeefee3185c473cb9cae2b5751643f8620b8f942ebd147f99e202eN.exe

  • Size

    97KB

  • MD5

    e8dc51fc01f70870a1462cc1ab45be40

  • SHA1

    e5ba6e7795d4698d75445f17b9205bd9095a1d98

  • SHA256

    82b3c8f1a3eeefee3185c473cb9cae2b5751643f8620b8f942ebd147f99e202e

  • SHA512

    1186864c8c592960b90dbda4481d0ad37e175ccb9b41b031c682a058bc70faf365a4711b0b545f9c8d3f529dc5ee9c61cf5730990a2a25d1c87a9284490be7b8

  • SSDEEP

    1536:Q0okmAT0g4LttL7Q0iu8P6zCpZS5WngmFKenenYecr7d/+QBLAr16224XKfI3d:lw/Q0iuk6O6MUene6Pd5LV2Iud

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2