strongpity | a4377256776becf75f0f61874cfec3729e17e894f5c9fc1576321f0398142878

General

Target
a4377256776becf75f0f61874cfec3729e17e894f5c9fc1576321f0398142878
Size 108KB
Sample220130-khn4hsabc8
SHA256 a4377256776becf75f0f61874cfec3729e17e894f5c9fc1576321f0398142878
MD5 76d116964a9d15c2e14963d5f286eef5
SHA1 56fd1735dc9b3480b9b4071a1851485af70a0258
SHA512 4779ec3a11b3b3a5ad5c9f06286255df0c12ba5041b61d4ace28a049a914354a3d8ec327813c423fafbff2b09a56228721adfe0677c5b0158a85eba31fcfa660
SSDEEP 3072:Dym8iAClvXBLDF3HWXzTTJoc9hk2oRVNde/x6dAwkw5N:oiACxFF3HqTAeTwk2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strongpity

Malware Config

Signatures

StrongPity Spyware 1 IoCs

resource	yara_rule
sample	family_strongpity

Strongpity family
strongpity

File Explorer

a4377256776becf75f0f61874cfec3729e17e894f5c9fc1576321f0398142878

.exe 108KB

a4377256776becf75f0f61874cfec3729e17e894f5c9fc1576321f0398142878

IMPHASH 40972f3608f18dcf148832b47c7524d6
SHA256 a4377256776becf75f0f61874cfec3729e17e894f5c9fc1576321f0398142878
MD5 76d116964a9d15c2e14963d5f286eef5
SHA1 56fd1735dc9b3480b9b4071a1851485af70a0258
SHA512 4779ec3a11b3b3a5ad5c9f06286255df0c12ba5041b61d4ace28a049a914354a3d8ec327813c423fafbff2b09a56228721adfe0677c5b0158a85eba31fcfa660
SSDEEP 3072:Dym8iAClvXBLDF3HWXzTTJoc9hk2oRVNde/x6dAwkw5N:oiACxFF3HqTAeTwk2
MD5 SHA1 SHA512 SSDEEP

windows x86

StrongPity Spyware

PE Signature issue

Digest

3c:9e:f4:92:e9:2e:fc:8c:6b:a0:f9:a0:c9:37:6d:aa:bc:7d:35:8a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

11582

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathW ExitProcess GetVolumeInformationW LoadLibraryW GetProcAddress GetModuleHandleA CreateProcessW CloseHandle FindFirstFileW FindClose GetFileAttributesW HeapFree GetProcessHeap FindNextFileW GetTickCount HeapAlloc CreateFileW GetFileSize ReadFile SetFileAttributesW DeleteFileW OpenEventW SetEvent WriteFile CreateMutexW GetLastError Sleep DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetModuleHandleExW GetACP GetFileType HeapReAlloc FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

wsprintfW

shlwapi

PathFindFileNameW

winhttp

WinHttpOpen WinHttpSendRequest

Sharing