Extracted

• • Target

    f2f6081793cd87144132ea5633fe54e69a1ef2a2256b9535ce4443e45f645501.exe

  • Size

    542KB

  • MD5

    f6c0b64b450f58cc623082845051a9f9

  • SHA1

    cce54d8b5b9ef54b26ec3e05a8687dbe04b91c8b

  • SHA256

    f2f6081793cd87144132ea5633fe54e69a1ef2a2256b9535ce4443e45f645501

  • SHA512

    3c9616e02100e7fd333986714e76f41d25ff777db7eae296f02f8215d7986c8cb2bcd6fd39645734ac3bc567df7a8422be21ab731f8868d381af2fb1202ee1aa

  • SSDEEP

    3072:Y3FPo4wMMv7A8/HaVuYeHHvWM/EOh7xWN9T7xWN9hqabvHlnfnbn0XpCbMIgjGwn:Y3Vo4udnHHvv8OC4b8vJSaK/e+Fj8RXP

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealerupx

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2