Extracted

• • Target
    Pony 1.9/pony/BuilderSrc/ASkin/DelphiXE2/acShellCtrls.pas
  • Size 113KB
  • SHA256 52417d1e46e743cf4cb7792ed18f2e63c15b78aa38bb3ceb25f2e74bc4614be6
  • MD5 5dabae9d9ad66ee13fe852c818a750d4
  • SHA1 0b40e31df49065db52df30d1f752392a6486d08d
  • SHA512 66bff0c950ce1bc2306f2191c80a3cc30e0d1db9bb436d0d45bcb838e0bd8f4c615d0e4833cd50778ae152e4a29195fbd7a77ad7abfb465fdaadcb20d0dda345
  • SSDEEP 1536:+XpbTWBZ2/o960r/56C9qCDI0CAzhC79vgvW:+9TX/Jn50r4
  • TLSH
    T114B3F934FA6E47752DB5D4EC63264846CD4A500342B216843E8CD4FB1FF4AE8A3B47BA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral1behavioral2
• • Target
    Pony 1.9/pony/PonyBuilder.exe
  • Size 2.1MB
  • SHA256 8aa03cbf7a9290457ae0b7000b4d0b9ff60c97d7f5a11118d56c0fbd7ca3a105
  • MD5 4822e664cf87155b13cf659035a96aec
  • SHA1 1703c95bdc2acbcc55e07677e8cfef02f943de55
  • SHA512 5f0d72a0e3f9fdf97e50540c0d3cf13f08816d13245106d2911c3948b2e0473f9425f1ef06da412e588db58886fbe9e7b9be444e11315b7388e270c16292b1a4
  • SSDEEP 49152:iSOXB1VpIc1OMHPh0WMV5oaIjCHI+gc+eUe4he5QMYwFq6xqMe0UC/PxYq:ixM0OmtAoVjCHI+Z+eVAe5QMzFvxq0UF
  • TLSH
    T191A533F4FBC13CF1E5E57A718815F9821412F0AAB74E21150C6AC586D73FAC3AB9A14B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectioncredential_accessdiscoveryexecutionponyratspywarestealerupx

  • Family: Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Executes dropped EXE

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral3behavioral4
• • Target
    Pony 1.9/web/404.html
  • Size 348B
  • SHA256 7cc79432ea8ef9c1f7eb89e8f90985f00b6916fa938156f3ce42643d5878933c
  • MD5 91cc4c0c0e03d9bc0be30142d06fce05
  • SHA1 f8f636eba50494bfdf77352d9f77218e5a825ded
  • SHA512 78d4c586cf69c731b47cef576d175c99c6395fe77aed07ce10b766db35dfbbee26dfbee2ae692b425775cdd5c1aa1836cd376dd4040c49e7c3709e2441e1f777
  • TLSH
    T147E0787F93422D0741B1467434C1F1D1414B2352B12905546D40747F3F5562CC1D33D4
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  discovery
  behavioral5behavioral6
• • Target
    Pony 1.9/web/adm/index.php
  • Size 55KB
  • SHA256 7886cddcba54857cf8b03699416ab82eacf153df0cb7a60f6aa6030945428f3e
  • MD5 e849b569acead83d5a0445e2e4292a1b
  • SHA1 27233a57beeeb9a504c016d596e878a075bdbc36
  • SHA512 025cd9e42bb74208c89dcd0314cf17a3d8e09bb8f3e0aef920d113f93a2742c51cf9725e1d2e68f6fa26b19e5c5a618ad222a2f5c211be54774f5c05fa4fb87a
  • SSDEEP 768:ex75BlLi5lvrnQ5Exyt+i8SQ4W0bQVpB/secVxtNBonymz4/usYz1HoOa0UW9obM:g75B1wet+i44xbQVrslxHrw1MzKPXJ
  • TLSH
    T17C43A34A7D425AFA54B0E1A18F5AE514CAB20CBBA455D343B67F388C4F7422C0BF993D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral7behavioral8
• • Target
    Pony 1.9/web/adm/install/index.php
  • Size 28KB
  • SHA256 d7e721352d0b0c747d4962f4269ae29a33fc7abd075cd03deecda128d4f88661
  • MD5 c2ad17e50776f5e3b4c3f59225f67aa8
  • SHA1 d1a205112051822a2770506a6f3a5ceaa788cc00
  • SHA512 f805854b3db48a0e97394a1fa77d73ae9ec3e364b1daa37c0c389189ab13eaa62cbc6c3ea680bf219a58269fa5ae8012b9a235374f749593e3fc461d9fa1d1d7
  • SSDEEP 384:8p2CMzUkdpdIC/qkakbI7c5sjwdBRB5KFja0fTcTh:kCAkdpdXqkakbI78sjyRB5Wja0fTcTh
  • TLSH
    T17FD2830F3F41E7D3A5B198818A02BD52D526086FA791E60137AE77CD8F74A3847E242F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral10behavioral9