strongpity | 12e670dc36ac50e86a58f759fa4a5de25e574227a19e1942aaa788c82540a910

General

Target
12e670dc36ac50e86a58f759fa4a5de25e574227a19e1942aaa788c82540a910
Size 117KB
Sample220124-gpqzxadbd2
SHA256 12e670dc36ac50e86a58f759fa4a5de25e574227a19e1942aaa788c82540a910
MD5 443bfcd74364c90aae3377915a422c1c
SHA1 dcf4142b7d8ae17b8ecde5330b9d30746d2b0224
SHA512 51bc991a8f0262bf5058dee2c6caed2071494baee7cfedfdca963f02301f8160207abc501777c79767b084016889fa1526eb7e765aa6058067e02e1d0da5233b
SSDEEP 3072:lo9on6AE2vEW3ptf/meUMOOno/OPME0c6mrdydDSF:P6AEm3nGueYd2mF
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

12e670dc36ac50e86a58f759fa4a5de25e574227a19e1942aaa788c82540a910

.exe 117KB

12e670dc36ac50e86a58f759fa4a5de25e574227a19e1942aaa788c82540a910

IMPHASH ce80c3f913ad93fbe5a903be0f947d7e
SHA256 12e670dc36ac50e86a58f759fa4a5de25e574227a19e1942aaa788c82540a910
MD5 443bfcd74364c90aae3377915a422c1c
SHA1 dcf4142b7d8ae17b8ecde5330b9d30746d2b0224
SHA512 51bc991a8f0262bf5058dee2c6caed2071494baee7cfedfdca963f02301f8160207abc501777c79767b084016889fa1526eb7e765aa6058067e02e1d0da5233b
SSDEEP 3072:lo9on6AE2vEW3ptf/meUMOOno/OPME0c6mrdydDSF:P6AEm3nGueYd2mF
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

Minor OS version

Major OS version

Entry point

11258

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile FindFirstFileW HeapFree FindNextFileW WriteFile GetTempPathW FindClose CreateFileW GetFileAttributesW GetModuleHandleA SetFileAttributesW Sleep DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount GetLastError EncodePointer WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpen

Sharing