Extracted

• • Target

    701627e01a60f015b913fe6bd09c6965641f29fde30d7290c032a0de1939f45fN.exe

  • Size

    129KB

  • MD5

    cb08748266ca8cfc7b2ad809945eace0

  • SHA1

    6b219129a10743429fa8ecfdfe9803fb297926da

  • SHA256

    701627e01a60f015b913fe6bd09c6965641f29fde30d7290c032a0de1939f45f

  • SHA512

    9e9ede291ab8b3327ad6e2a9ddb6ef5883e6e6fdbd6c9b3c1a81d87717fbc46a3f5c1cde66e4d95e871c5c2f8167554f23339da24ee278033ab656bc7b05d23b

  • SSDEEP

    3072:rWFI3+BzI+DI2iVMRToqJZbk3bVb+TIazW:PnTW7ZbkxWx

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2