Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
10-11-2023 10:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win7-20231023-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win10v2004-20231023-en
9 signatures
150 seconds
General
-
Target
loader.exe
-
Size
92KB
-
MD5
ddd479eae63055960aea274cc64dcddf
-
SHA1
25b872831839ebdeff28c65f12857921087e1352
-
SHA256
b9b3faad6d063a6b63ef22080e78efa4e037e73107fea3883c8f191a435873ed
-
SHA512
10181dfe0fcc5a2dcec775b8f803cbd141151343aec633f662870f81bb996a19ae9e8c1aee093fe2f869197bbbc2138825e69960aaf0e09512df759a010dd103
-
SSDEEP
1536:u5qS7K3+OYV75P7T2Bfk6VbubwK6ZiyLXxgPSfn2pEqY8Gi4G:up1ABKbf6IyLXHfn2b4G
Score
10/10
Malware Config
Signatures
-
Detect Poverty Stealer Payload 6 IoCs
resource yara_rule behavioral1/memory/2244-1-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2244-6-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2244-7-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2244-8-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2244-11-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2244-12-0x0000000000400000-0x000000000041A000-memory.dmp family_povertystealer -
Poverty Stealer
Poverty Stealer is a crypto and infostealer written in C++.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.