strongpity | 91e20fb663b1809279666fb1e7ef7bd8da42ae51e0c05b51515ba851e2a991ac

General

Target
91e20fb663b1809279666fb1e7ef7bd8da42ae51e0c05b51515ba851e2a991ac
Size 174KB
Sample220124-espvxabghp
SHA256 91e20fb663b1809279666fb1e7ef7bd8da42ae51e0c05b51515ba851e2a991ac
MD5 d4057c628387f461b15ec7ad78de6ca1
SHA1 368fcaaad87f28e2ab2552dc47b701f3b49b02c0
SHA512 b76dbfd3b4c71cb58c889b8d1c710818b34950ab181859ee8998ca26a12032977ea7850e676f2accbd16f414b2931c93ef645f3c756e2317972280a414aa4755
SSDEEP 3072:kNrcsEvHmTZIvOYzsFojyJPELIkMCPLRYZGB6lDPDhIPFJRAhP2EAeOkJK1:kxcsdTRXFEX8P4DeP81
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

91e20fb663b1809279666fb1e7ef7bd8da42ae51e0c05b51515ba851e2a991ac

.exe 174KB

91e20fb663b1809279666fb1e7ef7bd8da42ae51e0c05b51515ba851e2a991ac

IMPHASH 90570395bfeb43df5c7a271296b7c409
SHA256 91e20fb663b1809279666fb1e7ef7bd8da42ae51e0c05b51515ba851e2a991ac
MD5 d4057c628387f461b15ec7ad78de6ca1
SHA1 368fcaaad87f28e2ab2552dc47b701f3b49b02c0
SHA512 b76dbfd3b4c71cb58c889b8d1c710818b34950ab181859ee8998ca26a12032977ea7850e676f2accbd16f414b2931c93ef645f3c756e2317972280a414aa4755
SSDEEP 3072:kNrcsEvHmTZIvOYzsFojyJPELIkMCPLRYZGB6lDPDhIPFJRAhP2EAeOkJK1:kxcsdTRXFEX8P4DeP81
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

Minor OS version

Major OS version

Entry point

10614

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GetVolumeInformationW FindFirstFileW HeapFree FindNextFileW WriteFile GetTempPathW FindClose CreateFileW GetFileAttributesW GetModuleHandleA SetFileAttributesW Sleep DeleteFileW CloseHandle HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount GetLastError DecodePointer EncodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW HeapReAlloc GetFileType FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo WriteConsoleW

shlwapi

PathFindFileNameW

winhttp

WinHttpAddRequestHeaders WinHttpQueryHeaders WinHttpReadData WinHttpOpenRequest WinHttpSetOption WinHttpOpen WinHttpWriteData WinHttpSendRequest WinHttpQueryOption WinHttpConnect WinHttpCrackUrl WinHttpReceiveResponse WinHttpCloseHandle

Sharing