strongpity | d912445a5e8beda7e842756fd6e598d91ef0526c913a6f1e6135957f19fa64ca

General

Target
d912445a5e8beda7e842756fd6e598d91ef0526c913a6f1e6135957f19fa64ca
Size 108KB
Sample220124-gk2wlsdbek
SHA256 d912445a5e8beda7e842756fd6e598d91ef0526c913a6f1e6135957f19fa64ca
MD5 196e30e9367bf7c094c6546c46a5ddac
SHA1 c91da76e073c229d7a842697151003ccd41f0db5
SHA512 7c332bc320b76760b08c4052e114022897622c8320099a01b0fbc5b1a080401866463105444f95883d75ad2e04e52c45fe761ed0ec44c3699c66a24fd5081d15
SSDEEP 3072:gNu10GG2vXBGcAaZcPZS0KXl0pEp3RVNde/x6SAwZlO:gC0GGc3AaT0Aeqwa
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

d912445a5e8beda7e842756fd6e598d91ef0526c913a6f1e6135957f19fa64ca

.exe 108KB

d912445a5e8beda7e842756fd6e598d91ef0526c913a6f1e6135957f19fa64ca

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 d912445a5e8beda7e842756fd6e598d91ef0526c913a6f1e6135957f19fa64ca
MD5 196e30e9367bf7c094c6546c46a5ddac
SHA1 c91da76e073c229d7a842697151003ccd41f0db5
SHA512 7c332bc320b76760b08c4052e114022897622c8320099a01b0fbc5b1a080401866463105444f95883d75ad2e04e52c45fe761ed0ec44c3699c66a24fd5081d15
SSDEEP 3072:gNu10GG2vXBGcAaZcPZS0KXl0pEp3RVNde/x6SAwZlO:gC0GGc3AaT0Aeqwa
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

bd:14:28:02:99:81:93:0f:9c:7b:fe:c8:c8:35:49:bc:f1:c4:cc:c9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11714

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing