Extracted

• • Target

    bcf94d95d8b116327c818ee00501670fe21f552da4a6ca4649bf164daad2ffe6.exe

  • Size

    120KB

  • MD5

    0ded0e035d042371da764757ba9699d5

  • SHA1

    4cf6e6dad15b8852081818033df4175b9efb94e6

  • SHA256

    bcf94d95d8b116327c818ee00501670fe21f552da4a6ca4649bf164daad2ffe6

  • SHA512

    01ff2c9fb907bef762891e953768a67a6e48b45580deb4a52fa0eed98d070cc5fd1cd7bf1c61e8ceb3dd1193628c9a1184fab5ccab0a5dd57a49bc8c92713b97

  • SSDEEP

    1536:zKhft65BoLc7R5CYPZzXu7iDAzdOyDQJML7/9Ad+ekRwVqwQwbtTW9vKjr6KYR2+:EOW4VDs/DQ8AvVmw936Ka2KmrS65COEn

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2