Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
07/10/2023, 13:25
General
-
Target
NEAS.b8303120c1bf50b01dbc9f8d6fea45d8exe_JC.exe
-
Size
888KB
-
MD5
b8303120c1bf50b01dbc9f8d6fea45d8
-
SHA1
6c94bd065520ce1fb4eaac4b0479ff6087573cec
-
SHA256
c1ae35cd9be8a69a397e7b1e24229847a71bf7ff80bf4021429ee9804bf02652
-
SHA512
73b6a12703d2cc5534a3e502c79b8bb8cde78ef97daa9d6e91762ee30739c16b329fb9ff29bb6a05c4089cb1bd9ebc7c289edd5454e8f862879158686021c3d8
-
SSDEEP
12288:qIKpM6POHEEF081OMTAy/Ubf1eAUNtBI9e4fmSuBJuQpgcOmWHNtU6:qIKjPOHEEF081OMlEfUPBIpuBYHw6
Score
10/10
Malware Config
Signatures
-
Detect Poverty Stealer Payload 7 IoCs
-
Poverty Stealer
Poverty Stealer is a crypto and infostealer written in C++.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.b8303120c1bf50b01dbc9f8d6fea45d8exe_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.b8303120c1bf50b01dbc9f8d6fea45d8exe_JC.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB