Extracted

• • Target

    17b286ddac2ba19a2ba0c138cbb588d1b9f4475d5770025054115f8a38e91666N

  • Size

    128KB

  • MD5

    40a409b72ab86dab618fbce1356c1aa0

  • SHA1

    f5f412c34488bf9d2c2a8fe5e824a86f378efd5b

  • SHA256

    17b286ddac2ba19a2ba0c138cbb588d1b9f4475d5770025054115f8a38e91666

  • SHA512

    8c15a9cc27fa3587dabab0d1882e0501933a97cdf20d258498162c35e50d57b8558feeb080800fe50a414f55ba2dc0314c8e95a18d8aa873bbea111ed435134e

  • SSDEEP

    1536:DLSrQO3jbViimkB2nuQ1YMisVHSWjgxPll3gPFK/yTi6MqVMLMFWzOyjmRC/0zcW:yr4kB3QYs1SWEN3kFK6TirLiWD/m

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2