Extracted

• • Target

    ed0ab03aeb907457afe692650d994bfd965ecc0138fe00535d99facd4e4ffe6d.exe

  • Size

    101KB

  • MD5

    e913730b9d5e1fce23d7f577072dfaea

  • SHA1

    5c23c7dab0dbbde17918d050f65030f5e14b55ba

  • SHA256

    ed0ab03aeb907457afe692650d994bfd965ecc0138fe00535d99facd4e4ffe6d

  • SHA512

    18cfd2a8307271fc4bde313fc1a5e9df0c9c505f5420baca15b8133b233183eacf492fe281356659ca808ac9879cf1e3143a11ee28b2e007fd8fa10dc8c45e92

  • SSDEEP

    1536:C5f1opAvOle4SrlItkMVU9IH0+SIiSdF2drleCuTJgaK8:CZ1oGvL4wItPU9IH09IL2dYCuFgaZ

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2