Extracted

• • Target

    igo-android-320x480.exe

  • Size

    103KB

  • MD5

    1107aad3f09e426d35b73dd82acd7d0d

  • SHA1

    f5284fc60ece7e690a462ed6e4606a23c82d6bd1

  • SHA256

    6cb06b8d0588df1e2a6f5888fcbcffb901de4bbbe9ccb37ed060ecda99ea9633

  • SHA512

    030c85075d7a9107172f92494ad9cf89e3105253a9ec3c9c8c9198185c3adfff99818787889473b57a42a8c4b025ddee656073dcd8f1cc67ea6f0ac7926e647f

  • SSDEEP

    768:SH5NNNNNNNNbNNNNNNNNbNNNNNNNNbNNNNNNNNbNNNNNNNNbNNNNNNNNbNNNNNN1:G0jLKpUpVOkz7e/dEWXt

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealerupx

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2