strongpity | 89f1a82f4919db731cc4a5c5a71fbe1a9a1d362b6da61b018c89ea2cd26c0de3

General

Target
89f1a82f4919db731cc4a5c5a71fbe1a9a1d362b6da61b018c89ea2cd26c0de3
Size 117KB
Sample220124-fy99gacfgn
SHA256 89f1a82f4919db731cc4a5c5a71fbe1a9a1d362b6da61b018c89ea2cd26c0de3
MD5 42f9375f6d99d92955766edf5aa6f88a
SHA1 2d86ac6f8cc092ebcc333c41d4a03b0a78f6174b
SHA512 9391104e0205fcfb4f9d578f3990187ce8e9378c2380feca9b1bec64edc3712d659c0959b1adfd64080dc8b06fe17ae7425735624c960e5c640cbd2d5d5c8c30
SSDEEP 3072:pRmfUPqvgzpDws9g0hUeHolmPME0O6n7dOxSF:/mfUPzN9lGxd3F
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

89f1a82f4919db731cc4a5c5a71fbe1a9a1d362b6da61b018c89ea2cd26c0de3

.exe 117KB

89f1a82f4919db731cc4a5c5a71fbe1a9a1d362b6da61b018c89ea2cd26c0de3

IMPHASH f563b92796f96e3fd07b90238c582e9a
SHA256 89f1a82f4919db731cc4a5c5a71fbe1a9a1d362b6da61b018c89ea2cd26c0de3
MD5 42f9375f6d99d92955766edf5aa6f88a
SHA1 2d86ac6f8cc092ebcc333c41d4a03b0a78f6174b
SHA512 9391104e0205fcfb4f9d578f3990187ce8e9378c2380feca9b1bec64edc3712d659c0959b1adfd64080dc8b06fe17ae7425735624c960e5c640cbd2d5d5c8c30
SSDEEP 3072:pRmfUPqvgzpDws9g0hUeHolmPME0O6n7dOxSF:/mfUPzN9lGxd3F
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

Minor OS version

Major OS version

Entry point

11259

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile FindFirstFileW HeapFree FindNextFileW WriteFile GetTempPathW FindClose CreateFileW GetFileAttributesW OpenEventW GetModuleHandleA SetFileAttributesW SetEvent DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount Sleep GetLastError EncodePointer WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpen

Sharing