Extracted

• • Target

    faa5497f82e6abdbbd28f5fe76fb877703621c44d5a9e3b7fedd3b1b075f7d87.exe

  • Size

    160KB

  • MD5

    673694cae2fdc3c72fad528d85ca9b2e

  • SHA1

    36d53f69fecb97b8af02799e5914bcfa3bede1c5

  • SHA256

    faa5497f82e6abdbbd28f5fe76fb877703621c44d5a9e3b7fedd3b1b075f7d87

  • SHA512

    7952e7d0a9d89dfa44ec2fc1bd8e644da87dc5cf06748c925a1b646da2e6f5abeb22190c230618a29236c4eadf66b638f370fa8df18b28bc12438b4ab1c275d7

  • SSDEEP

    3072:o1bP6o0UWGiCY2P8rQ6FUAgqxaIYAc01vF6woq6wEh:o1W4WGg2POQ6mAgqxQAcWvFfoLBh

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2