Extracted

• • Target

    eecbebced0c98bd8606aff0ae3fcd57e310e6f95dd723d68b90885f1017e060aN

  • Size

    100KB

  • MD5

    8649af385a3c2ab101452afee8a55c90

  • SHA1

    69280378823ceca6d7b3f50d74c726af83cf32c7

  • SHA256

    eecbebced0c98bd8606aff0ae3fcd57e310e6f95dd723d68b90885f1017e060a

  • SHA512

    0cb3fcb438fe774805dfaec1cc82959dad264293140d80208dcc18d0f8076f5c52c3bc7963d9cf752be0da3e780b8cea6bc6798068ae41ad6511bc58955a405f

  • SSDEEP

    3072:PV8kcD69TjDEvxFqb1ITEY8TNqbJz9vIoIY5H:PV5O+nDEzqb1ebJz9w0H

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2