strongpity | 18c6224decd141a6412f3d2aa71dbd086e9a71bd51b3baed1cb2b2715d676872

General

Target
18c6224decd141a6412f3d2aa71dbd086e9a71bd51b3baed1cb2b2715d676872
Size 116KB
Sample220124-glvtpadbfr
SHA256 18c6224decd141a6412f3d2aa71dbd086e9a71bd51b3baed1cb2b2715d676872
MD5 17f8871e99cb456eb8a4dbb3f1d6bbbc
SHA1 54440cfe6b1cf380e1db13eae90111e4c2951369
SHA512 3af05e0646559483fed10999f58360329d3ff2bf02f7fc62a6e8ca893790de92046c35c3a2369d55e46b9f039e5172b8f6efc9e702dc900c21839b76cbd34453
SSDEEP 3072:Ot5wdC2vzZSrB70EiRMFrvRYsDPsqxs6Ne7905nS9:ODwdClr1gUeb959
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

18c6224decd141a6412f3d2aa71dbd086e9a71bd51b3baed1cb2b2715d676872

.exe 116KB

18c6224decd141a6412f3d2aa71dbd086e9a71bd51b3baed1cb2b2715d676872

IMPHASH 8abe3681c11e209ff85599f5e699bd77
SHA256 18c6224decd141a6412f3d2aa71dbd086e9a71bd51b3baed1cb2b2715d676872
MD5 17f8871e99cb456eb8a4dbb3f1d6bbbc
SHA1 54440cfe6b1cf380e1db13eae90111e4c2951369
SHA512 3af05e0646559483fed10999f58360329d3ff2bf02f7fc62a6e8ca893790de92046c35c3a2369d55e46b9f039e5172b8f6efc9e702dc900c21839b76cbd34453
SSDEEP 3072:Ot5wdC2vzZSrB70EiRMFrvRYsDPsqxs6Ne7905nS9:ODwdClr1gUeb959
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

Minor OS version

Major OS version

Entry point

11388

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GetVolumeInformationW FindFirstFileW HeapFree FindNextFileW GetTempPathW FindClose CreateFileW GetFileAttributesW OpenEventW GetModuleHandleA SetFileAttributesW SetEvent DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount CreateMutexW Sleep GetLastError EncodePointer WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpen

Sharing