strongpity | 586fc08567a69f4abbafd05c98be469dfaaa9b93eaccc5043dcf22d2b666bf63

General

Target
586fc08567a69f4abbafd05c98be469dfaaa9b93eaccc5043dcf22d2b666bf63
Size 108KB
Sample220124-fsgpzacdf8
SHA256 586fc08567a69f4abbafd05c98be469dfaaa9b93eaccc5043dcf22d2b666bf63
MD5 51c1d0c4d3a0bd6505e268777ad994d6
SHA1 631718abe8f9b17e3b507378c66992117c2d6d30
SHA512 c48784c44173fffbe97a380393bb9ffaed5c61e1e59d5b7e8fad44365fb4b51c8169bd07b3b798dd83bc46dde1f73495ba962cec5dbad84e449b0ef00c653b63
SSDEEP 3072:XC08aGmWvWBOg3Je94ZSHnKympnp3RVNde/x61eAwwg:F8aGmN/3JAHeeOXwX
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

586fc08567a69f4abbafd05c98be469dfaaa9b93eaccc5043dcf22d2b666bf63

.exe 108KB

586fc08567a69f4abbafd05c98be469dfaaa9b93eaccc5043dcf22d2b666bf63

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 586fc08567a69f4abbafd05c98be469dfaaa9b93eaccc5043dcf22d2b666bf63
MD5 51c1d0c4d3a0bd6505e268777ad994d6
SHA1 631718abe8f9b17e3b507378c66992117c2d6d30
SHA512 c48784c44173fffbe97a380393bb9ffaed5c61e1e59d5b7e8fad44365fb4b51c8169bd07b3b798dd83bc46dde1f73495ba962cec5dbad84e449b0ef00c653b63
SSDEEP 3072:XC08aGmWvWBOg3Je94ZSHnKympnp3RVNde/x61eAwwg:F8aGmN/3JAHeeOXwX
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

dd:99:be:68:53:cc:dc:5f:52:a0:b4:d2:95:6c:7f:55:3e:e8:2d:d2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11681

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing