Extracted

• • Target
    F2945753C6CEDF8E7B8E8F4E04859591C3EDF18C7652A.exe
  • Size 89KB
  • SHA256 f2945753c6cedf8e7b8e8f4e04859591c3edf18c7652a00f9765ac99694cc874
  • MD5 30a1f73357e2088bdda8c95c2dda0eac
  • SHA1 60f058765cde196581d5d20ec47fbb045a51cdbb
  • SHA512 657036643a986fe0f73e206bb939367d8cb44468c5488bc4493d4f314f31de23e96e09169dfb13e743ded5e45c159fa96e9cb5df17e4aa92fac5b59b4b04f549
  • MD5 SHA1 SHA512

  Score

  10^/10

  ponydiscoveryratspywarestealersuricata

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • suricata: ET MALWARE Fareit/Pony Downloader Checkin 2

    suricata: ET MALWARE Fareit/Pony Downloader Checkin 2

    suricata

  • suricata: ET MALWARE Fareit/Pony Downloader Checkin 3

    suricata: ET MALWARE Fareit/Pony Downloader Checkin 3

    suricata

  • suricata: ET MALWARE Pony Downloader HTTP Library MSIE 5 Win98

    suricata: ET MALWARE Pony Downloader HTTP Library MSIE 5 Win98

    suricata

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2