Overview

overview

10

Static

static

a97702b25f...b1.exe

windows7_x64

10

a97702b25f...b1.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a97702b25fea7863bff4a1f37b5e5a4733f2772f9e0cb55e73956acaddf53ab1

  • Size

    2.3MB

  • Sample

    220128-xq5gpabafn

  • MD5

    819e71bf3e6f4d0bac816a36eca5f3d3

  • SHA1

    0661be49531a1b13a9fa7a76eabd906ed613da82

  • SHA256

    a97702b25fea7863bff4a1f37b5e5a4733f2772f9e0cb55e73956acaddf53ab1

  • SHA512

    e47bbbb232d34f0e8fbb9d820f3e1c97554b8464c5aeb05e612b76300ab23da565892ecd3e76ec65a7faf6e837a942c2c8ab036aae1951551e766cfbd040e398

Score
10/10
strongpityspywarestealer

Malware Config

Targets

    • Target

      a97702b25fea7863bff4a1f37b5e5a4733f2772f9e0cb55e73956acaddf53ab1

    • Size

      2.3MB

    • MD5

      819e71bf3e6f4d0bac816a36eca5f3d3

    • SHA1

      0661be49531a1b13a9fa7a76eabd906ed613da82

    • SHA256

      a97702b25fea7863bff4a1f37b5e5a4733f2772f9e0cb55e73956acaddf53ab1

    • SHA512

      e47bbbb232d34f0e8fbb9d820f3e1c97554b8464c5aeb05e612b76300ab23da565892ecd3e76ec65a7faf6e837a942c2c8ab036aae1951551e766cfbd040e398

    Score
    10/10
    strongpityspywarestealer

    • StrongPity

      StrongPity is a spyware developed by PROMETHIUM APT group mainly used in government sponsored attacks.

      stealerspywarestrongpity

    • StrongPity Spyware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks