Overview

overview

10

Static

static

3

pfxbuildp.exe

windows7-x64

10

pfxbuildp.exe

windows10-2004-x64

10

User tags

Assigned on submission by the user, not by sandbox detections.

Threatview.io Proactive Hunter

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pfxbuildp.exe

  • Size

    64KB

  • Sample

    240120-dlcrbsaegp

  • MD5

    bd6bc876c9982dc4dca58de4b888ea89

  • SHA1

    7eaf691bb4d4190fdc1d12c49060e751cb237d7c

  • SHA256

    14d189700c022461e6672c5ed4b4011477c595c39e50076b3c218cb042f0b1f3

  • SHA512

    aae252cb55b05550472c22d504b65a1111bddaa3757165527ebfb47a26269cc2b9b8c56428f887336f0242c040d7501c0266945c7bd73c2acc467be01cedabda

  • SSDEEP

    1536:yFI06H+UF8Gc/nsJmMbsXbwobSxjLhDSTz64:yFI0+9DqskMbsLRbSxjLhDSTz

Score
10/10
povertystealerspywarestealer

Malware Config

Targets

    • Target

      pfxbuildp.exe

    • Size

      64KB

    • MD5

      bd6bc876c9982dc4dca58de4b888ea89

    • SHA1

      7eaf691bb4d4190fdc1d12c49060e751cb237d7c

    • SHA256

      14d189700c022461e6672c5ed4b4011477c595c39e50076b3c218cb042f0b1f3

    • SHA512

      aae252cb55b05550472c22d504b65a1111bddaa3757165527ebfb47a26269cc2b9b8c56428f887336f0242c040d7501c0266945c7bd73c2acc467be01cedabda

    • SSDEEP

      1536:yFI06H+UF8Gc/nsJmMbsXbwobSxjLhDSTz64:yFI0+9DqskMbsLRbSxjLhDSTz

    Score
    10/10
    povertystealerspywarestealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks