strongpity | d63533bb200525a0a88a68c592c8d4f534fcf83b0acf8ec6be24b7059b0352ae

General

Target
d63533bb200525a0a88a68c592c8d4f534fcf83b0acf8ec6be24b7059b0352ae
Size 108KB
Sample220124-dsgc4abaa3
SHA256 d63533bb200525a0a88a68c592c8d4f534fcf83b0acf8ec6be24b7059b0352ae
MD5 d79f8aed9248a5be169fe59e2ca4a54f
SHA1 ccc80eebdb2ab3320b0ed0fc8d41df03b3b2b186
SHA512 90626f1333b9966892c9ee7d87911519a599b50b86ab981ab5f0a5d8850d612beb159dd28b4e7ec9c5c9f271da4a8e46a0850f7f83725edefd06cafcfe42a12a
SSDEEP 3072:ZWpohGG2vEBuMm4XO/xio83xypbpgRVNde/x6kAwH8:5hGGbXm4joMeowc
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

d63533bb200525a0a88a68c592c8d4f534fcf83b0acf8ec6be24b7059b0352ae

.exe 108KB

d63533bb200525a0a88a68c592c8d4f534fcf83b0acf8ec6be24b7059b0352ae

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 d63533bb200525a0a88a68c592c8d4f534fcf83b0acf8ec6be24b7059b0352ae
MD5 d79f8aed9248a5be169fe59e2ca4a54f
SHA1 ccc80eebdb2ab3320b0ed0fc8d41df03b3b2b186
SHA512 90626f1333b9966892c9ee7d87911519a599b50b86ab981ab5f0a5d8850d612beb159dd28b4e7ec9c5c9f271da4a8e46a0850f7f83725edefd06cafcfe42a12a
SSDEEP 3072:ZWpohGG2vEBuMm4XO/xio83xypbpgRVNde/x6kAwH8:5hGGbXm4joMeowc
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

98:d0:13:b0:b2:ab:05:8c:3e:08:90:39:e1:ba:56:cc:81:8d:99:a9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11652

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing