Extracted

• • Target

    4f367f0b242a058439f1437d33c098f21ab456a802a77385e8b6998b80506601.exe

  • Size

    91KB

  • MD5

    0259441e38c2f88edb3f3ad8a112b722

  • SHA1

    a2e3162f8f2c1fea94b7f63cd83b49fdc219969e

  • SHA256

    4f367f0b242a058439f1437d33c098f21ab456a802a77385e8b6998b80506601

  • SHA512

    43fe02d64b42f55a3b06b0bfeaed2ce827bc110a9f8f8cd447228bd5dc1554fce66b795911e3f9a6d03bc095a9e405dadff05523d1d55f60fed08720914c702b

  • SSDEEP

    1536:pLJqW7HNpQ4qTBl7Mf59CfLMvM352lmz2ROCcnTvHkzb//PI:J8stG4CfYvE54ROC5//PI

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2