strongpity | bac8489de573f614d988097e9eae53ffc2eb4e7dcb0e68c349f549a26d2130a8

General

Target
bac8489de573f614d988097e9eae53ffc2eb4e7dcb0e68c349f549a26d2130a8
Size 110KB
Sample220124-d5s8esbca8
SHA256 bac8489de573f614d988097e9eae53ffc2eb4e7dcb0e68c349f549a26d2130a8
MD5 cab76ac00e342f77bdfec3e85b6b85a9
SHA1 b1126befc26edcfff5fa3c6f82517c0d79df96e3
SHA512 045dcf8877b5f0805b695d1803656eafde1023781bc2d06a8e985f8c181b60ba065fe50b06229526ae96dcf15d4a87dd8491aa020a7bf0eb3fc8f2c35785c1ea
SSDEEP 3072:EMu1MOgh5veCRSY53GnBR+/OtGP1fhU6DAVzrfU+LX:EMNOghbsDHRVPfUoX
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

bac8489de573f614d988097e9eae53ffc2eb4e7dcb0e68c349f549a26d2130a8

.exe 110KB

bac8489de573f614d988097e9eae53ffc2eb4e7dcb0e68c349f549a26d2130a8

IMPHASH 7783f5400d697e1c14ca6539a9e978bc
SHA256 bac8489de573f614d988097e9eae53ffc2eb4e7dcb0e68c349f549a26d2130a8
MD5 cab76ac00e342f77bdfec3e85b6b85a9
SHA1 b1126befc26edcfff5fa3c6f82517c0d79df96e3
SHA512 045dcf8877b5f0805b695d1803656eafde1023781bc2d06a8e985f8c181b60ba065fe50b06229526ae96dcf15d4a87dd8491aa020a7bf0eb3fc8f2c35785c1ea
SSDEEP 3072:EMu1MOgh5veCRSY53GnBR+/OtGP1fhU6DAVzrfU+LX:EMNOghbsDHRVPfUoX
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

Minor OS version

Major OS version

Entry point

11183

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GetVolumeInformationW FindFirstFileW HeapFree FindNextFileW WriteFile GetTempPathW FindClose CreateFileW GetFileAttributesW OpenEventW SetFileAttributesW SetEvent DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount CreateMutexW Sleep GetLastError WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpen

Sharing