Extracted

• • Target

    2969233c903523ca4e291bdecd376d4a59214d342e62c92e5bd06032472d3430.exe

  • Size

    129KB

  • MD5

    a3a79f80b7d90fcc632af7f87aa7d4b1

  • SHA1

    ce377138ccfd6eb29a582c5cfdefe4d77628c31e

  • SHA256

    2969233c903523ca4e291bdecd376d4a59214d342e62c92e5bd06032472d3430

  • SHA512

    085a5d814ee69dc3ee5591cef148eb232ad2b7b3c651a4907608b58ea7f670164ced975068d1d82e4e8e914ab35244eae908cf8f31be082ceb594bd70c31358c

  • SSDEEP

    3072:rWFI3+BzI+DI2iVMRToqJZbk3bVb+TIazWJ:PnTW7ZbkxWxq

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2