Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
17/10/2023, 15:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
3 signatures
150 seconds
General
-
Target
file.exe
-
Size
122KB
-
MD5
2904b7653eebfece5a4f333ecba28c12
-
SHA1
0fc464b432c7edbe4720b3439f80432bbc13631e
-
SHA256
5807ffef8961091a219aec0c13c73980eef926129c284cac82d977387884ea93
-
SHA512
15591a55f885194a4e1ef4f1f2d3d904e8f57baf9f077afee132a63a7aeab8f1c64742773b0ed0232cf9fb842ce17a5cc2b4a50ce6544e2545b2318abf0b3164
-
SSDEEP
1536:QKyqh/+cR9UEF7Gk0p6E3DVHkXT1uKtXy0pUA8sEdIlc:QKyqEtEepD3y5Xy0pUdsyl
Score
10/10
Malware Config
Signatures
-
Detect Poverty Stealer Payload 7 IoCs
resource yara_rule behavioral1/memory/1692-0-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/1692-6-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/1692-8-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/1692-12-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/1692-13-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/1692-14-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/1692-15-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer -
Poverty Stealer
Poverty Stealer is a crypto and infostealer written in C++.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.