Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
11-11-2023 00:34
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.37fa3008ef3410532d8ee278cfbe2440.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.37fa3008ef3410532d8ee278cfbe2440.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.37fa3008ef3410532d8ee278cfbe2440.exe
-
Size
92KB
-
MD5
37fa3008ef3410532d8ee278cfbe2440
-
SHA1
bffcb76b5b5b2985616f57b34ad1e212211c8b35
-
SHA256
2f77ea020279cb65e76a446720a88ff7c754e7c61d87b1189e4728b5b474ce99
-
SHA512
2a37c4ac38833a3d31bc4e2c7363f00ef5c74b888109362c665209cff29290182a47ec5e6b9a702f715ed763a2237856d30c1fb312c3dcd8b299935730559082
-
SSDEEP
1536:oSqd7a3mOxVX75PvT2xK1dvIYlVbnt0GbqGiyLXxgPSfn2pEqY8GA4b:orFFxKzNLqJyLXHfn2N4b
Malware Config
Signatures
-
Detect Poverty Stealer Payload 5 IoCs
resource yara_rule behavioral1/memory/2900-1-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2900-6-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2900-7-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2900-11-0x0000000000020000-0x000000000002A000-memory.dmp family_povertystealer behavioral1/memory/2900-12-0x0000000000400000-0x000000000041A000-memory.dmp family_povertystealer -
Poverty Stealer
Poverty Stealer is a crypto and infostealer written in C++.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.