Analysis

  • max time kernel
    144s
  • max time network
    136s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    14-03-2021 11:28

General

  • Target

    dfd0f4b821438d8a9277728e42ab58bdc2667aa7173892ffd6ede75a5d5645f5.bin.exe

  • Size

    176KB

  • MD5

    0f609dd490b21c85e9c8d1db8995e791

  • SHA1

    30d448d7457818e4404b3b5e2079efa3d8d60bc3

  • SHA256

    dfd0f4b821438d8a9277728e42ab58bdc2667aa7173892ffd6ede75a5d5645f5

  • SHA512

    9f5951dc5c3b20c3faebb3bd0f8ad5c9ad1eba5dda2e45309d25600b5a8eaab90490fb06057e3c92b4ba89af8a61ae103840db3b23a5bc30b37c32d41487f79e

Malware Config

Signatures

  • StrongPity

    StrongPity is a spyware developed by PROMETHIUM APT group mainly used in government sponsored attacks.

Processes

  • C:\Users\Admin\AppData\Local\Temp\dfd0f4b821438d8a9277728e42ab58bdc2667aa7173892ffd6ede75a5d5645f5.bin.exe
    "C:\Users\Admin\AppData\Local\Temp\dfd0f4b821438d8a9277728e42ab58bdc2667aa7173892ffd6ede75a5d5645f5.bin.exe"
    1⤵
      PID:3564

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads