strongpity | 8e670fc7e22d0fa3eb96262686bd7eec18f81e3dc1eb9b55526078ffd9ae00c3

General

Target
8e670fc7e22d0fa3eb96262686bd7eec18f81e3dc1eb9b55526078ffd9ae00c3
Size 111KB
Sample220124-gdxnbadacl
SHA256 8e670fc7e22d0fa3eb96262686bd7eec18f81e3dc1eb9b55526078ffd9ae00c3
MD5 2500f9b20567ee062c4cd03ef4093b18
SHA1 8c3489280d39333dd214e003ceb4a5f125cfc09d
SHA512 402a34ba08208f7e6dac81c1001982e1e929015ed8b46c133f520d3df3817bf3682d449f26e37bca29236f2a037f9e1a3bf0b5c8e7deb4f055e06c434fead01e
SSDEEP 3072:NoN/O/iszJvDJ5R6mnBmt1oimQdlP1fOk6lwAVZqLXSaj+E:t/iszn5AJohViXnj+E
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

8e670fc7e22d0fa3eb96262686bd7eec18f81e3dc1eb9b55526078ffd9ae00c3

.exe 111KB

8e670fc7e22d0fa3eb96262686bd7eec18f81e3dc1eb9b55526078ffd9ae00c3

IMPHASH 0a79b16a7733793de06a25de69eccb10
SHA256 8e670fc7e22d0fa3eb96262686bd7eec18f81e3dc1eb9b55526078ffd9ae00c3
MD5 2500f9b20567ee062c4cd03ef4093b18
SHA1 8c3489280d39333dd214e003ceb4a5f125cfc09d
SHA512 402a34ba08208f7e6dac81c1001982e1e929015ed8b46c133f520d3df3817bf3682d449f26e37bca29236f2a037f9e1a3bf0b5c8e7deb4f055e06c434fead01e
SSDEEP 3072:NoN/O/iszJvDJ5R6mnBmt1oimQdlP1fOk6lwAVZqLXSaj+E:t/iszn5AJohViXnj+E
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

4b:1d:5c:89:49:c8:6a:36:10:c3:0d:8c:b5:0c:00:23:0b:73:62:3d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11231

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GetVolumeInformationW FindFirstFileW HeapFree FindNextFileW WriteFile GetTempPathW FindClose CreateFileW GetFileAttributesW OpenEventW SetFileAttributesW SetEvent DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount CreateMutexW Sleep GetLastError WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleCP DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpOpen

Sharing