strongpity | 211aae5346741680cb921d73e2833368cd0f0cc36e15b16115599554dcb2386d

General

Target
211aae5346741680cb921d73e2833368cd0f0cc36e15b16115599554dcb2386d
Size 108KB
Sample220124-gv8f5sdcd6
SHA256 211aae5346741680cb921d73e2833368cd0f0cc36e15b16115599554dcb2386d
MD5 08f8dbc010ec24fa565c4edfd1d53d05
SHA1 7013befa1a03fbb9855977c27b5d222ec8f922f3
SHA512 9cd3f983e355993b8406279a790d7d888b98dc999f53e99c1f3542e4378f84aa927b4da452f90c639c2491f386fb3e247b772955a6f6e77d6ccd3cabfe1b01f8
SSDEEP 3072:0sIAlGWmvoBOYeAQr24ZSSolbLpzpaRVNde/x6RAwH/Fri:iAlGWzTeAQASze/wHI
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

211aae5346741680cb921d73e2833368cd0f0cc36e15b16115599554dcb2386d

.exe 108KB

211aae5346741680cb921d73e2833368cd0f0cc36e15b16115599554dcb2386d

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 211aae5346741680cb921d73e2833368cd0f0cc36e15b16115599554dcb2386d
MD5 08f8dbc010ec24fa565c4edfd1d53d05
SHA1 7013befa1a03fbb9855977c27b5d222ec8f922f3
SHA512 9cd3f983e355993b8406279a790d7d888b98dc999f53e99c1f3542e4378f84aa927b4da452f90c639c2491f386fb3e247b772955a6f6e77d6ccd3cabfe1b01f8
SSDEEP 3072:0sIAlGWmvoBOYeAQr24ZSSolbLpzpaRVNde/x6RAwH/Fri:iAlGWzTeAQASze/wHI
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

da:66:cf:1c:73:02:3d:24:31:f2:c6:bf:3b:d7:9b:b5:64:b9:54:0f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11676

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing