Extracted

• • Target

    385de8fdaf641abbcfcbd3a6829719fbab045df62ffe1547244bc9bb37546cc8.exe

  • Size

    114KB

  • MD5

    b896a9538cb9ba6bf7e1fca4692f1f8f

  • SHA1

    c3241416ac2d252b547646b9b60d516f6e4e8e9a

  • SHA256

    385de8fdaf641abbcfcbd3a6829719fbab045df62ffe1547244bc9bb37546cc8

  • SHA512

    435a613c06edf7effa4da92c698baa5d534601fae1e769a703111e219ac431d66bbf9f411fb86454ae4875d180593fada4e93e3d115fa1b4ac81de5b09f8b972

  • SSDEEP

    3072:LcN+zAVSlAUXEdge4+GKwWjx34Zo+7l3J:uTVSlDAge4UwWdG

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2