strongpity | 3165650b667f315eae56895ee2041ffb17f89a92b034efd045f5e88bf788016d

General

Target
3165650b667f315eae56895ee2041ffb17f89a92b034efd045f5e88bf788016d
Size 112KB
Sample220124-grnmkadcfn
SHA256 3165650b667f315eae56895ee2041ffb17f89a92b034efd045f5e88bf788016d
MD5 0ec51113584217eba24e41698a3511a7
SHA1 4a0056ce0bfbd0bd47ee5b31c80d06412eedd3dd
SHA512 fb3978023c514d45cc7b006bb59be79da6d85c06255388425f1ae30e49308c5be638e5f10a41038b5fefc09846fe74e4ef5d8538ef3e5190a90d2fba1e339da7
SSDEEP 3072:bcm9gNdvczBRo+3m0zMh/Nu87CfdIRnF6nwLweO:bl9gN+m+Lz7IvLI
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

3165650b667f315eae56895ee2041ffb17f89a92b034efd045f5e88bf788016d

.exe 112KB

3165650b667f315eae56895ee2041ffb17f89a92b034efd045f5e88bf788016d

IMPHASH 5fa2da673f6659ad061ecc63793cb430
SHA256 3165650b667f315eae56895ee2041ffb17f89a92b034efd045f5e88bf788016d
MD5 0ec51113584217eba24e41698a3511a7
SHA1 4a0056ce0bfbd0bd47ee5b31c80d06412eedd3dd
SHA512 fb3978023c514d45cc7b006bb59be79da6d85c06255388425f1ae30e49308c5be638e5f10a41038b5fefc09846fe74e4ef5d8538ef3e5190a90d2fba1e339da7
SSDEEP 3072:bcm9gNdvczBRo+3m0zMh/Nu87CfdIRnF6nwLweO:bl9gN+m+Lz7IvLI
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

57:6b:50:c0:6b:3c:6c:49:91:c0:63:b5:7d:cb:f3:75:eb:ef:45:27

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11723

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP GetFileType LCMapStringW HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW DecodePointer

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing