Overview

overview

10

Static

static

3

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    910KB

  • Sample

    231013-d572kscg5w

  • MD5

    86aec1d77c3b004c38d5ee246499728c

  • SHA1

    0b6c07ea05e33ea59e906f4a07eeb3d6416dd655

  • SHA256

    eaa4f4d4e90b308f6cda183dcaef8be9b8fa85404aa2635e8457d0a36bf7e46d

  • SHA512

    25cb83f28ecdbc6e4638ca40d6989ea3b0697cfc37c9d5ff11a729fe2aab2511205674379d075170b3981e914575577b0dd450562dc28aeb951b45464ba67a1f

  • SSDEEP

    24576:BlG682grdGA/7+AVkIk3T06zFrZi7rDh:w2grdGAz+KkzBFqDh

Score
10/10
povertystealerstealer

Malware Config

Targets

    • Target

      tmp

    • Size

      910KB

    • MD5

      86aec1d77c3b004c38d5ee246499728c

    • SHA1

      0b6c07ea05e33ea59e906f4a07eeb3d6416dd655

    • SHA256

      eaa4f4d4e90b308f6cda183dcaef8be9b8fa85404aa2635e8457d0a36bf7e46d

    • SHA512

      25cb83f28ecdbc6e4638ca40d6989ea3b0697cfc37c9d5ff11a729fe2aab2511205674379d075170b3981e914575577b0dd450562dc28aeb951b45464ba67a1f

    • SSDEEP

      24576:BlG682grdGA/7+AVkIk3T06zFrZi7rDh:w2grdGAz+KkzBFqDh

    Score
    10/10
    povertystealerstealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks