Overview

overview

10

Static

static

3

eaa4f4d4e9...6d.exe

windows7-x64

10

eaa4f4d4e9...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    check.zip

  • Size

    337KB

  • Sample

    230912-jhz1caeb6v

  • MD5

    273be17ec64ef7d743891dc3fe2a6d49

  • SHA1

    68126e2016a73faf76cd94e0833f285afdec77c7

  • SHA256

    7395c4058038da5e23e1a37ad2acaee07a05d8db7c87da9bda7a411caad86bd3

  • SHA512

    d5b714224c7663988688b54958bf87e850a12b622867df92fea4445815a8e179433e35e7252eb630ffffeee0ad5f04e3627bbbb7e2beffad4594047df8268fdf

  • SSDEEP

    6144:AJYdWhdOOU43++fjix0fGkG7ym5vgmUlE63aqu1CqXPo3W2SZ8eDR8kJ7dZKTVk:hUxU4LGeGZWm5s2IrMNfKW2L88A7yk

Score
10/10
povertystealerstealer

Malware Config

Targets

    • Target

      eaa4f4d4e90b308f6cda183dcaef8be9b8fa85404aa2635e8457d0a36bf7e46d

    • Size

      910KB

    • MD5

      86aec1d77c3b004c38d5ee246499728c

    • SHA1

      0b6c07ea05e33ea59e906f4a07eeb3d6416dd655

    • SHA256

      eaa4f4d4e90b308f6cda183dcaef8be9b8fa85404aa2635e8457d0a36bf7e46d

    • SHA512

      25cb83f28ecdbc6e4638ca40d6989ea3b0697cfc37c9d5ff11a729fe2aab2511205674379d075170b3981e914575577b0dd450562dc28aeb951b45464ba67a1f

    • SSDEEP

      24576:BlG682grdGA/7+AVkIk3T06zFrZi7rDh:w2grdGAz+KkzBFqDh

    Score
    10/10
    povertystealerstealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks