General

  • Target

    8a372a849320884f016b96a92571b1d9.exe

  • Size

    125KB

  • Sample

    230910-rl9myshf75

  • MD5

    8a372a849320884f016b96a92571b1d9

  • SHA1

    3f9b383fb794721e5b922bcd32f0a90931e0cd76

  • SHA256

    0d9f87c757c72b861c411ccfbb890c771ed8cddc28e03482eb967662e624511d

  • SHA512

    a6a75f730c498afaa8d8098f4be25b166e5a98f5f537746b78efe94fd551a566be07fa4b6338e5737a713d6322b0fceaa123c8c67e4424355e53ea63245b151d

  • SSDEEP

    1536:sSAWPA4qMRtU8okc9q1fGqmkl0lyKRjjQWuXJAAqK08HTF2mNjPx1:tVPsR5iOJo0lyKRjNoSd8zFTNLx1

Malware Config

Targets

    • Target

      8a372a849320884f016b96a92571b1d9.exe

    • Size

      125KB

    • MD5

      8a372a849320884f016b96a92571b1d9

    • SHA1

      3f9b383fb794721e5b922bcd32f0a90931e0cd76

    • SHA256

      0d9f87c757c72b861c411ccfbb890c771ed8cddc28e03482eb967662e624511d

    • SHA512

      a6a75f730c498afaa8d8098f4be25b166e5a98f5f537746b78efe94fd551a566be07fa4b6338e5737a713d6322b0fceaa123c8c67e4424355e53ea63245b151d

    • SSDEEP

      1536:sSAWPA4qMRtU8okc9q1fGqmkl0lyKRjjQWuXJAAqK08HTF2mNjPx1:tVPsR5iOJo0lyKRjNoSd8zFTNLx1

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks