strongpity | f1a3c2bd241e09f4e98ca15c0d3d804297086c84883d81bb8b74960c6e986555

General

Target
f1a3c2bd241e09f4e98ca15c0d3d804297086c84883d81bb8b74960c6e986555
Size 140KB
Sample220124-dbp9nsafgm
SHA256 f1a3c2bd241e09f4e98ca15c0d3d804297086c84883d81bb8b74960c6e986555
MD5 86c766b8d9dcdbd2856807fc8357676a
SHA1 54121a6abfbd370d12c97be8b10536e911199afe
SHA512 b6d19400271ba139860bda26a0a71919e8d99cb6e36ba6165849c09ffc4aac53cd93764e65b1c386f2f116ad5ae4986e0e359dafcaee6957171b569397648ccb
SSDEEP 3072:gcNCMNpavuQrpm4HmB16R7b8I1f1PME0569F7dRln5IzZBSF:eMNpCrkBC3xZdH5IyF
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

f1a3c2bd241e09f4e98ca15c0d3d804297086c84883d81bb8b74960c6e986555

.exe 140KB

f1a3c2bd241e09f4e98ca15c0d3d804297086c84883d81bb8b74960c6e986555

IMPHASH b996e2c3977a7044670484c0428d059e
SHA256 f1a3c2bd241e09f4e98ca15c0d3d804297086c84883d81bb8b74960c6e986555
MD5 86c766b8d9dcdbd2856807fc8357676a
SHA1 54121a6abfbd370d12c97be8b10536e911199afe
SHA512 b6d19400271ba139860bda26a0a71919e8d99cb6e36ba6165849c09ffc4aac53cd93764e65b1c386f2f116ad5ae4986e0e359dafcaee6957171b569397648ccb
SSDEEP 3072:gcNCMNpavuQrpm4HmB16R7b8I1f1PME0569F7dRln5IzZBSF:eMNpCrkBC3xZdH5IyF
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

Minor OS version

Major OS version

Entry point

11272

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile FindFirstFileW HeapFree FindNextFileW GetTempPathW FindClose CreateFileW GetFileAttributesW OpenEventW GetModuleHandleA SetFileAttributesW SetEvent DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount Sleep GetLastError EncodePointer WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpen

Sharing