strongpity

General

Target

78556a2fc01c40f64f11c76ef26ec3ff
Size

4.9MB
Sample

211111-vpr4vsghbk
MD5

78556a2fc01c40f64f11c76ef26ec3ff
SHA1

b66a7117d0e22dc0421337e20612ea08f1b2c9e3
SHA256

7d3192cad53f934173187f91d8555065d69e09b4f127275a1d47f9f1f9405c5c
SHA512

c001603616e7539612e75707664c5356f3fc16a2e6e9033a77f0d4f3cf2854a71310f194e8d9f41207f41c1b60bd7b8fcd49797ba3cfc96a2d406bc55ab104d3

Score

10^/10

Malware Config

Targets

- Target
  
  78556a2fc01c40f64f11c76ef26ec3ff
- Size
  
  4.9MB
- MD5
  
  78556a2fc01c40f64f11c76ef26ec3ff
- SHA1
  
  b66a7117d0e22dc0421337e20612ea08f1b2c9e3
- SHA256
  
  7d3192cad53f934173187f91d8555065d69e09b4f127275a1d47f9f1f9405c5c
- SHA512
  
  c001603616e7539612e75707664c5356f3fc16a2e6e9033a77f0d4f3cf2854a71310f194e8d9f41207f41c1b60bd7b8fcd49797ba3cfc96a2d406bc55ab104d3
Score

10^/10

strongpity spyware stealer xmrig miner persistence evasion trojan
- Registers COM server for autorun
  persistence
- StrongPity
  StrongPity is a spyware developed by PROMETHIUM APT group mainly used in government sponsored attacks.
  stealer spyware strongpity
- StrongPity Spyware
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- Executes dropped EXE
- Sets service image path in registry
  persistence
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2

T1060

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

3

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Registers COM server for autorun

StrongPity Spyware

xmrig

Executes dropped EXE

Sets service image path in registry

Loads dropped DLL

Checks whether UAC is enabled

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7