strongpity | c94e52455826c63a8800e6a66d72db467e1266f3b06aabbaad14c0d7463ee266

General

Target
c94e52455826c63a8800e6a66d72db467e1266f3b06aabbaad14c0d7463ee266
Size 108KB
Sample220124-ggnvksdagq
SHA256 c94e52455826c63a8800e6a66d72db467e1266f3b06aabbaad14c0d7463ee266
MD5 2062c64ddb1ee195aa4564fa52b9842b
SHA1 1d6b695365f5ad86233363e48c7034f4f408c7d1
SHA512 0036f4df93e7be2366d1840c351f19db3ef86313a7de204ffd7fe395a36c19334a476c4b14bab021a29cc97b32b020c06e471a03a8f56ce7f662467a9739a247
SSDEEP 3072:nOc+QIGvCBRBklPu3dsFzOKTG21RVNde/x6JAwXCu:/+QIRFklgs1e3wz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

c94e52455826c63a8800e6a66d72db467e1266f3b06aabbaad14c0d7463ee266

.exe 108KB

c94e52455826c63a8800e6a66d72db467e1266f3b06aabbaad14c0d7463ee266

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 c94e52455826c63a8800e6a66d72db467e1266f3b06aabbaad14c0d7463ee266
MD5 2062c64ddb1ee195aa4564fa52b9842b
SHA1 1d6b695365f5ad86233363e48c7034f4f408c7d1
SHA512 0036f4df93e7be2366d1840c351f19db3ef86313a7de204ffd7fe395a36c19334a476c4b14bab021a29cc97b32b020c06e471a03a8f56ce7f662467a9739a247
SSDEEP 3072:nOc+QIGvCBRBklPu3dsFzOKTG21RVNde/x6JAwXCu:/+QIRFklgs1e3wz
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

a8:5e:cc:17:41:1f:8a:97:99:32:23:aa:f3:4e:e4:2e:93:c4:e5:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11695

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing