strongpity | 44ba0bfe401a07f4570fd3ca26f5955350ac831a21326face55465f8d9a7ec52

General

Target
44ba0bfe401a07f4570fd3ca26f5955350ac831a21326face55465f8d9a7ec52
Size 108KB
Sample220124-gex1gachg7
SHA256 44ba0bfe401a07f4570fd3ca26f5955350ac831a21326face55465f8d9a7ec52
MD5 234882f8b4db2f42ff2cb3cad340ad9f
SHA1 131295f4b0875b1a57e3f65ba080c6c920e39900
SHA512 1130f76b4c0ce2a2396c2368c56c4989d679afaffae0f652f375a43c8e1e034413f113c57ddee3cba544425b05e8350b470b9d81a9bb9329b3cf2b5a6be7b212
SSDEEP 3072:Mq19GmWvABgom4XOnZSKw9DypeplRVNde/x68AwQ1:B9GmrNm4zKgeEw+
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

44ba0bfe401a07f4570fd3ca26f5955350ac831a21326face55465f8d9a7ec52

.exe 108KB

44ba0bfe401a07f4570fd3ca26f5955350ac831a21326face55465f8d9a7ec52

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 44ba0bfe401a07f4570fd3ca26f5955350ac831a21326face55465f8d9a7ec52
MD5 234882f8b4db2f42ff2cb3cad340ad9f
SHA1 131295f4b0875b1a57e3f65ba080c6c920e39900
SHA512 1130f76b4c0ce2a2396c2368c56c4989d679afaffae0f652f375a43c8e1e034413f113c57ddee3cba544425b05e8350b470b9d81a9bb9329b3cf2b5a6be7b212
SSDEEP 3072:Mq19GmWvABgom4XOnZSKw9DypeplRVNde/x68AwQ1:B9GmrNm4zKgeEw+
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

28:63:e5:6b:fa:ab:90:51:fa:a5:55:8c:7e:bb:aa:76:f4:65:6a:3b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11684

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing