strongpity | c72bf8537fc189b81855666d7f59ad8e24011c735921a15932275757a485e7a4

General

Target
c72bf8537fc189b81855666d7f59ad8e24011c735921a15932275757a485e7a4
Size 117KB
Sample220124-dzpytabbb7
SHA256 c72bf8537fc189b81855666d7f59ad8e24011c735921a15932275757a485e7a4
MD5 b647c95b334625c5d94a694ebd483e17
SHA1 1b8abdba3a95ce3bb7df1a5e8a8fe2a150370177
SHA512 30c2529007d67dbf8332480c95d12f1233aef89d5bc95de025590f941f1e0c8dc31c9a5b33c241871b53c70cd99e280affa7c11597e48f97e6ffca68b378b4d9
SSDEEP 3072:3sD8oIj/6vEWxpwSnPb2nXVCdyOPMExc6TMrd/tzsSF:3cIj/CxWs2FPdlzvF
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

c72bf8537fc189b81855666d7f59ad8e24011c735921a15932275757a485e7a4

.exe 117KB

c72bf8537fc189b81855666d7f59ad8e24011c735921a15932275757a485e7a4

IMPHASH ce80c3f913ad93fbe5a903be0f947d7e
SHA256 c72bf8537fc189b81855666d7f59ad8e24011c735921a15932275757a485e7a4
MD5 b647c95b334625c5d94a694ebd483e17
SHA1 1b8abdba3a95ce3bb7df1a5e8a8fe2a150370177
SHA512 30c2529007d67dbf8332480c95d12f1233aef89d5bc95de025590f941f1e0c8dc31c9a5b33c241871b53c70cd99e280affa7c11597e48f97e6ffca68b378b4d9
SSDEEP 3072:3sD8oIj/6vEWxpwSnPb2nXVCdyOPMExc6TMrd/tzsSF:3cIj/CxWs2FPdlzvF
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

Minor OS version

Major OS version

Entry point

11412

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile FindFirstFileW HeapFree FindNextFileW WriteFile GetTempPathW FindClose CreateFileW GetFileAttributesW GetModuleHandleA SetFileAttributesW Sleep DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount GetLastError EncodePointer WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpen

Sharing