strongpity | 7ae0aa490bad2fa152cd097caaaebfcef7a393a74e886a02b22109b38a4d9fc4

General

Target
7ae0aa490bad2fa152cd097caaaebfcef7a393a74e886a02b22109b38a4d9fc4
Size 108KB
Sample220130-kfw2caaba3
SHA256 7ae0aa490bad2fa152cd097caaaebfcef7a393a74e886a02b22109b38a4d9fc4
MD5 9798f0f65026e44b94851938dc68b296
SHA1 7bbafa07d4cedb87778b234781dc803d4edb8a01
SHA512 c656f557c140de764c60d1b0e03d548cdab0531050212b17150d638cf2624a4a011bc281732646d21819172f436cfe6a6a059de4ab4771ab62ec8a48c58d685a
SSDEEP 3072:URoWdG+1vUB1U9PMXTJSVGbYeJc59RVNde/x6BAwGi:TWdG+uY9PLVReDwb
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

7ae0aa490bad2fa152cd097caaaebfcef7a393a74e886a02b22109b38a4d9fc4

.exe 108KB

7ae0aa490bad2fa152cd097caaaebfcef7a393a74e886a02b22109b38a4d9fc4

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 7ae0aa490bad2fa152cd097caaaebfcef7a393a74e886a02b22109b38a4d9fc4
MD5 9798f0f65026e44b94851938dc68b296
SHA1 7bbafa07d4cedb87778b234781dc803d4edb8a01
SHA512 c656f557c140de764c60d1b0e03d548cdab0531050212b17150d638cf2624a4a011bc281732646d21819172f436cfe6a6a059de4ab4771ab62ec8a48c58d685a
SSDEEP 3072:URoWdG+1vUB1U9PMXTJSVGbYeJc59RVNde/x6BAwGi:TWdG+uY9PLVReDwb
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

8a:56:27:cb:1d:ed:f8:f1:da:89:c7:e7:ba:8c:91:40:6f:b2:25:f6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11603

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing