strongpity | fad11a279c6fe195f8110702f962c5296015344da17919b361f73f7f504063ca

General

Target
fad11a279c6fe195f8110702f962c5296015344da17919b361f73f7f504063ca
Size 112KB
Sample220124-gvpc9sdcc7
SHA256 fad11a279c6fe195f8110702f962c5296015344da17919b361f73f7f504063ca
MD5 09c55dbda0004fd7e048bdd910e909b4
SHA1 e85c24dbbb5586273f88c080ad5e703cffee87d1
SHA512 200cedfab607db37fc3279b0de98085de522a08fa5d98eca657a9593e356f2152248b67f0bcf144c8378723524707be1242d2407d485a7f18f0ffb77ab90f1e9
SSDEEP 3072:hGQEs6BvPKRRngalO8hnNs1EzP1fOk6DIAVkmLXHaj+E:PEs6Uz9rEVBX6j+E
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

fad11a279c6fe195f8110702f962c5296015344da17919b361f73f7f504063ca

.exe 112KB

fad11a279c6fe195f8110702f962c5296015344da17919b361f73f7f504063ca

IMPHASH 0a79b16a7733793de06a25de69eccb10
SHA256 fad11a279c6fe195f8110702f962c5296015344da17919b361f73f7f504063ca
MD5 09c55dbda0004fd7e048bdd910e909b4
SHA1 e85c24dbbb5586273f88c080ad5e703cffee87d1
SHA512 200cedfab607db37fc3279b0de98085de522a08fa5d98eca657a9593e356f2152248b67f0bcf144c8378723524707be1242d2407d485a7f18f0ffb77ab90f1e9
SSDEEP 3072:hGQEs6BvPKRRngalO8hnNs1EzP1fOk6DIAVkmLXHaj+E:PEs6Uz9rEVBX6j+E
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

a9:f6:d4:96:6e:0f:71:01:5c:98:2a:c1:23:4a:da:9c:ac:da:f1:f1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11242

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadFile GetVolumeInformationW FindFirstFileW HeapFree FindNextFileW WriteFile GetTempPathW FindClose CreateFileW GetFileAttributesW OpenEventW SetFileAttributesW SetEvent DeleteFileW CloseHandle LoadLibraryW HeapAlloc GetProcAddress GetFileSize ExitProcess GetProcessHeap CreateProcessW GetTickCount CreateMutexW Sleep GetLastError WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleCP DecodePointer

shlwapi

PathFindFileNameW

winhttp

WinHttpSendRequest WinHttpOpen

Sharing