Extracted

• • Target

    ddac6ae5a04d2b0a3453efc882fcbb7772b16b400700c6ea71a24316cde92963N.exe

  • Size

    104KB

  • MD5

    d785f5d0a1e7252d50352e19d09e3de0

  • SHA1

    3da6841d155f8b7ac134f5afdec13a017c9e73f2

  • SHA256

    ddac6ae5a04d2b0a3453efc882fcbb7772b16b400700c6ea71a24316cde92963

  • SHA512

    a4dcc48d8ca9578e67b18c34c4039f5002d317b0e9b593c5a9737f8bd8fd5247ce71aa21a2fe9e5b61d0f1579a94966f868c97498ac87bb9c89abe970ce25e06

  • SSDEEP

    1536:D9TE/GGPs9kehtExX1uTK5NavsyxIAaVTZZtBQwJay8MClmQ0ErCW3:a/1s9nhODRavrIDVTTTEcumQ5rCW

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2