strongpity | b1916e7de11e87fa45c222d0532955e781f6695ae0ee15775894d3b3aa72ba98

General

Target
b1916e7de11e87fa45c222d0532955e781f6695ae0ee15775894d3b3aa72ba98
Size 108KB
Sample220124-d9ssfsbcf8
SHA256 b1916e7de11e87fa45c222d0532955e781f6695ae0ee15775894d3b3aa72ba98
MD5 c5c5a751c63ef4cdd6bfd34780068f00
SHA1 d7cfa28a32c2949f091d7193991f394010f1ecd8
SHA512 58a772a553934cf6b292b962c45f2a31839df988a6e0bc88137eb346d59cc949fd6b452eb9b054f955848e33f5f17ff600fcd9793bfaf0b65378ae717ca41b73
SSDEEP 3072:g11uGWmvNB7QXJ+9LZSHnKSnpap1RVNde/x6vAwXxFrD:auGWCaXJLHgeJwP
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

b1916e7de11e87fa45c222d0532955e781f6695ae0ee15775894d3b3aa72ba98

.exe 108KB

b1916e7de11e87fa45c222d0532955e781f6695ae0ee15775894d3b3aa72ba98

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 b1916e7de11e87fa45c222d0532955e781f6695ae0ee15775894d3b3aa72ba98
MD5 c5c5a751c63ef4cdd6bfd34780068f00
SHA1 d7cfa28a32c2949f091d7193991f394010f1ecd8
SHA512 58a772a553934cf6b292b962c45f2a31839df988a6e0bc88137eb346d59cc949fd6b452eb9b054f955848e33f5f17ff600fcd9793bfaf0b65378ae717ca41b73
SSDEEP 3072:g11uGWmvNB7QXJ+9LZSHnKSnpap1RVNde/x6vAwXxFrD:auGWCaXJLHgeJwP
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

23:17:26:1b:40:19:04:7e:93:b3:b4:76:6c:35:44:88:51:cb:8b:8f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11665

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing