Extracted

• • Target

    c130466a1f313ee3fa2b657eaf5d2ec61ea37c05ebe891327f295e69e0037d17N

  • Size

    102KB

  • MD5

    779364d148f25b6625d6d7ede9fb4eb0

  • SHA1

    226999d512d34db48123171aab80c276a4247921

  • SHA256

    c130466a1f313ee3fa2b657eaf5d2ec61ea37c05ebe891327f295e69e0037d17

  • SHA512

    51f0a9faaac0aa5ec8aa215c037b255e1bfd462cbea62d79265db04c6fb00e4d96ff9a694c86426a222264006a4e6a9508e09c9f486cc0d1137a6451b2415b15

  • SSDEEP

    1536:8aY/En7Ri7DM3ZUYru4hwRO/M4G+MAttLrrHOGJXyYwkSQGv0p9bWAY:8aY0ibMx5LrxJCY0v0pMA

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2