Overview

overview

10

Static

static

17adbb68c3...b4.exe

windows7_x64

10

17adbb68c3...b4.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    17adbb68c3410d3f1c4c19b1808149e74148839f1c082c3011bff86ddb71acb4
  • Size 8.6MB
  • Sample220124-gl2l8sdbgm
  • SHA256 17adbb68c3410d3f1c4c19b1808149e74148839f1c082c3011bff86ddb71acb4
  • MD5 SHA1 SHA512
Score
10/10
strongpityxmrigminerspywarestealer

Malware Config

Targets

    • Target
      17adbb68c3410d3f1c4c19b1808149e74148839f1c082c3011bff86ddb71acb4
    • Size 8.6MB
    • SHA256 17adbb68c3410d3f1c4c19b1808149e74148839f1c082c3011bff86ddb71acb4
    • MD5 SHA1 SHA512
    Score
    10/10
    strongpityxmrigminerspywarestealer

    • StrongPity

      StrongPity is a spyware developed by PROMETHIUM APT group mainly used in government sponsored attacks.

      stealerspywarestrongpity

    • StrongPity Spyware

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks