strongpity | 11849a6fcb76267676532422db4e9bf4f5c8c525fea0d950f844736bedb8b53e

General

Target
11849a6fcb76267676532422db4e9bf4f5c8c525fea0d950f844736bedb8b53e
Size 116KB
Sample220124-gqde7sdbe4
SHA256 11849a6fcb76267676532422db4e9bf4f5c8c525fea0d950f844736bedb8b53e
MD5 b7677e42852e9b8a3857476fda540224
SHA1 f328c56c052b6ce1e742d4135df03b8c2e780646
SHA512 ed2208050611236ff71c32d73cf3483577a643a146202f6fa88773f6a1467772777865dd78376bf2371a5b3e6da880468bd79cd65e7f903e666e1bab44b715cc
SSDEEP 3072:6i5UttmvzqOXBnAwitMpnbtYhTPsqxs6BTe79+ccS9:68UttsXhYMDD9FP9
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

11849a6fcb76267676532422db4e9bf4f5c8c525fea0d950f844736bedb8b53e

.exe 116KB

11849a6fcb76267676532422db4e9bf4f5c8c525fea0d950f844736bedb8b53e

IMPHASH 8abe3681c11e209ff85599f5e699bd77
SHA256 11849a6fcb76267676532422db4e9bf4f5c8c525fea0d950f844736bedb8b53e
MD5 b7677e42852e9b8a3857476fda540224
SHA1 f328c56c052b6ce1e742d4135df03b8c2e780646
SHA512 ed2208050611236ff71c32d73cf3483577a643a146202f6fa88773f6a1467772777865dd78376bf2371a5b3e6da880468bd79cd65e7f903e666e1bab44b715cc
SSDEEP 3072:6i5UttmvzqOXBnAwitMpnbtYhTPsqxs6BTe79+ccS9:68UttsXhYMDD9FP9
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

Minor OS version

Major OS version

Entry point

11416

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GetVolumeInformationW FindFirstFileW HeapFree FindNextFileW GetTempPathW FindClose CreateFileW GetFileAttributesW OpenEventW GetModuleHandleA SetFileAttributesW SetEvent DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount CreateMutexW Sleep GetLastError EncodePointer WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpen

Sharing