Extracted

• • Target

    2d19b5c5937737c495db1bbe4446c2b9a332883d88654e677b756d2d33ab12a0.exe

  • Size

    107KB

  • MD5

    a724032fb4116da4d078361f4a2cb657

  • SHA1

    d55e3b312b33b97659fc30ba43f512cf12f77a48

  • SHA256

    2d19b5c5937737c495db1bbe4446c2b9a332883d88654e677b756d2d33ab12a0

  • SHA512

    c3cdd099352b125d2cfd4228a967ae01521bef841efab4198304fa0137ff5a5cf5d5d3ce4422bb089eec52effc94ea013515f79fb3aa6f42ee11ce5e03220366

  • SSDEEP

    3072:QxOmfJtDnYC3NJtR/4fM/+pdxYcw8BmB0s1x:OJVT3NJXeM3c5wX

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2