Extracted

• • Target
    7b08c2efe246690f904eb4f235fad3ac.exe
  • Size 89KB
  • SHA256 5bb1e2f5330e171ee2e38e65c548a04d4c58109325218413e9e4abc43873b8df
  • MD5 7b08c2efe246690f904eb4f235fad3ac
  • SHA1 711d5077303101f3db5c2fc64dcfee718b3bc15a
  • SHA512 2cf708c87094c50c602a5a97745580aae9358eb5b4bdf8bcdb2cbd5e71b059d6726eb23fd6e2848200cb4796097cd292a023f44776046aca2910642d8b1f3910
  • SSDEEP 1536:yTz2ZkLGoqTIuW/NxRVcmXR3g4yttAnVi86QOqpCb//hkzbk8t/H+K7wm:yKmLGkVcmh3XOy+//Stt/H+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  ponycollectiondiscoveryratspywarestealer

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2