Extracted

• • Target

    f965b3921e2c82c1cf5d9770de53e894ff8cb8d73cccc784e67a39f5cef8a01a.exe

  • Size

    104KB

  • MD5

    4b89373c61ff4034060cebf1610b797b

  • SHA1

    1e019e5204556511f43a943e21e3b8bde6ba8e30

  • SHA256

    f965b3921e2c82c1cf5d9770de53e894ff8cb8d73cccc784e67a39f5cef8a01a

  • SHA512

    55224db40424cc1b6f812da57644b58791738a73af727c814f54ba2304c137831c23007a080c398f66d368a44270116bfdaa8f5f55dcc04cc5b904033c292161

  • SSDEEP

    1536:D9TE/GGPs9kehtExX1uTK5NavsyxIAaVTZZtBQwJay8MClmQ0ErCW3n:a/1s9nhODRavrIDVTTTEcumQ5rCW3

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2