strongpity | 2a7898573bd8be121eda249e7521efd2d599354d51fabae7edafef9d60dae8b1

General

Target
2a7898573bd8be121eda249e7521efd2d599354d51fabae7edafef9d60dae8b1
Size 108KB
Sample220124-ganagachfq
SHA256 2a7898573bd8be121eda249e7521efd2d599354d51fabae7edafef9d60dae8b1
MD5 e935327bef67d8bfc2df5697e103eac7
SHA1 b1632e63e9940d45c6d82599617fb725b99553a9
SHA512 93d540f5fb6e9c0f5c1205873d667586a68c738690f72eb2b560ad92c87e9fdfdd00198c3de0d591d529285898aed1da0022f085730b6260d2ba536af09b6f73
SSDEEP 3072:UwxgQIGvgBrdfiUa3dfu8D2T32PRVNde/x6JAw5J:jgQILTfiLfreHwn
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

2a7898573bd8be121eda249e7521efd2d599354d51fabae7edafef9d60dae8b1

.exe 108KB

2a7898573bd8be121eda249e7521efd2d599354d51fabae7edafef9d60dae8b1

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 2a7898573bd8be121eda249e7521efd2d599354d51fabae7edafef9d60dae8b1
MD5 e935327bef67d8bfc2df5697e103eac7
SHA1 b1632e63e9940d45c6d82599617fb725b99553a9
SHA512 93d540f5fb6e9c0f5c1205873d667586a68c738690f72eb2b560ad92c87e9fdfdd00198c3de0d591d529285898aed1da0022f085730b6260d2ba536af09b6f73
SSDEEP 3072:UwxgQIGvgBrdfiUa3dfu8D2T32PRVNde/x6JAw5J:jgQILTfiLfreHwn
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

a4:40:41:e9:24:ca:bf:19:62:20:3e:33:1b:e3:2d:10:09:5b:d6:06

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11698

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing