Extracted

• • Target

    e6310f77ccf5c88f01a830c371231719f2e0885d0d3989b7d7ee5915e2bc5f8fN

  • Size

    106KB

  • MD5

    0307721f6343a0fd0aa415eefe210f90

  • SHA1

    83d92750bc96b3194c1616fb7696a86f3924dda1

  • SHA256

    e6310f77ccf5c88f01a830c371231719f2e0885d0d3989b7d7ee5915e2bc5f8f

  • SHA512

    633f2a5a0a27ab6dba1f0f2a12a3f1f8b5223867d31f9f5ba31080b4adb2566b3ae2d028775cfedc45920aabf2f90d3f7ef2d132715aeaf3fc7d380a47aa1ff0

  • SSDEEP

    3072:/z1r6cA/CAN6mHMQOQ0ZS8hIwfO2owMFJ29wEj:/z4bCrmHMfQh8hIwDow6w9Bj

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2