Extracted

• • Target

    bc6c892e949f9d149985a7f5bbc269d751681f3bdf56a0a0e91e8480be90a6e6N.exe

  • Size

    107KB

  • MD5

    b6556023833e3b4cac291f32aaad90f0

  • SHA1

    c2d1b901628b3d10756018f5bf87ee333fac964e

  • SHA256

    bc6c892e949f9d149985a7f5bbc269d751681f3bdf56a0a0e91e8480be90a6e6

  • SHA512

    03f29fa8fca25d8ce6715db8b420bc1cf12eea04d9686f34a43a2b3106f3ccc5b855580a6e61cfc187b4e379ce0cfb44af849d260c3846d9a25a16244387c73e

  • SSDEEP

    3072:QxOmfJtDnYC3NJtR/4fM/+pdxYcw8BmB0s1Z:OJVT3NJXeM3c5wv

  Score

  10^/10

  ponycredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2