Extracted

• • Target

    77a821f96ec1cf63b8615a896d893eaa97468eda611d5c57a6baf4fdb85925dbN.exe

  • Size

    148KB

  • MD5

    9cd65170b6e0630d49797c652c4a6280

  • SHA1

    7c593745ad77db16678c2d88d020ba06813faffe

  • SHA256

    77a821f96ec1cf63b8615a896d893eaa97468eda611d5c57a6baf4fdb85925db

  • SHA512

    90fbd985a04b7a2c4ca18bc1c88e9b16ad6735771b6e14c57742903e23ca42588d9a0a42412a8303551dcd8f7fece1ef8ae61e8413d2f2a92e1df82b1457f4dd

  • SSDEEP

    3072:WVgq7obktKv+qu6rt4Kyy5GAV8VouOJgOsaaoi+:KgEM3uULyyQAVnvgH

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Deletes itself

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2