strongpity | b06ab1f3abf8262f32c3deab9d344d241e4203235043fe996cb499ed2fdf17c4

General

Target
b06ab1f3abf8262f32c3deab9d344d241e4203235043fe996cb499ed2fdf17c4
Size 112KB
Sample220124-efqxfabfbn
SHA256 b06ab1f3abf8262f32c3deab9d344d241e4203235043fe996cb499ed2fdf17c4
MD5 a4d3b78941da8b6f4edad7cb6f35134b
SHA1 96b83d94c4ce0d0b690c4ca2b6972e2d2a28e59b
SHA512 35ee9d6f9d1868588fdb89dcbac73a5396f6f4cca714c865578f7332fcbdd62e96aec3b456e99af7546bab6b79a530b5c849202a7f904c1453b685df532aa391
SSDEEP 3072:0r8HmgVNvwtdRM04KOMDsF/T4dBfdIRmF6BwLn2zqKFEAI:UGmgV8y0aMrI8LaM
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

b06ab1f3abf8262f32c3deab9d344d241e4203235043fe996cb499ed2fdf17c4

.exe 112KB

b06ab1f3abf8262f32c3deab9d344d241e4203235043fe996cb499ed2fdf17c4

IMPHASH 5fa2da673f6659ad061ecc63793cb430
SHA256 b06ab1f3abf8262f32c3deab9d344d241e4203235043fe996cb499ed2fdf17c4
MD5 a4d3b78941da8b6f4edad7cb6f35134b
SHA1 96b83d94c4ce0d0b690c4ca2b6972e2d2a28e59b
SHA512 35ee9d6f9d1868588fdb89dcbac73a5396f6f4cca714c865578f7332fcbdd62e96aec3b456e99af7546bab6b79a530b5c849202a7f904c1453b685df532aa391
SSDEEP 3072:0r8HmgVNvwtdRM04KOMDsF/T4dBfdIRmF6BwLn2zqKFEAI:UGmgV8y0aMrI8LaM
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

0e:19:9b:4d:ac:d0:94:04:19:1b:e4:29:c4:6a:d1:71:3a:13:f2:10

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11706

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP GetFileType LCMapStringW HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW DecodePointer

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing