Extracted

• • Target

    Scan_0185-pdf.exe

  • Size

    337KB

  • MD5

    fafc3aa1d8d7a2e4500797fa720f4853

  • SHA1

    bd61aa8ac1654204dc8ee3cc94cc1db734271149

  • SHA256

    f50e05d249dfed303937a41961a8f616fa73542e4b07b4cc1973256ba76ad343

  • SHA512

    05c724750d59c9f2423ad7b42abf1453a8c9db7bb7b0090fcd43e1aa1ccef97d96c09a15af53e8e8605fef8b5cf0edcdba1f553adc56237ca94cbd176db30a75

  • SSDEEP

    3072:QLJTYbdY/AWNpCG9WnZUx4CGgGEYVBkkyZwVAnMP:JGgZUx4CTGZBttZ

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealerupx

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2