strongpity | 6684c2348d205962d41977b2db6263733809b635cdc039447373c34e04d6bc20

General

Target
6684c2348d205962d41977b2db6263733809b635cdc039447373c34e04d6bc20
Size 108KB
Sample220124-gk7f4adbem
SHA256 6684c2348d205962d41977b2db6263733809b635cdc039447373c34e04d6bc20
MD5 18ff702d36348a0bc1fd25b177616284
SHA1 1a7c58c75837e0339420d1b5b4447df3a9dcf01f
SHA512 43b6c75c21e988c0a6ea6d19007b0b60d624c36cb26484d9aa909c748f47ac55a2dd5751be8cff6b11159f8d5e7eeb9fbc643acc5e11c09c6f3fc9cd8d496871
SSDEEP 3072:7KOd6GuWv5BFs8m2fgHZSo27x4pNpuRVNde/x6QAwBBW:d6Guyk8m2dogeQwy
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

6684c2348d205962d41977b2db6263733809b635cdc039447373c34e04d6bc20

.exe 108KB

6684c2348d205962d41977b2db6263733809b635cdc039447373c34e04d6bc20

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 6684c2348d205962d41977b2db6263733809b635cdc039447373c34e04d6bc20
MD5 18ff702d36348a0bc1fd25b177616284
SHA1 1a7c58c75837e0339420d1b5b4447df3a9dcf01f
SHA512 43b6c75c21e988c0a6ea6d19007b0b60d624c36cb26484d9aa909c748f47ac55a2dd5751be8cff6b11159f8d5e7eeb9fbc643acc5e11c09c6f3fc9cd8d496871
SSDEEP 3072:7KOd6GuWv5BFs8m2fgHZSo27x4pNpuRVNde/x6QAwBBW:d6Guyk8m2dogeQwy
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

03:d1:7e:ba:6b:fb:37:98:1a:87:c4:b9:55:2e:06:25:cb:27:48:56

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11630

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing