Overview

overview

10

Static

static

3

Meow.exe

windows7-x64

10

Meow.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Meow.exe

  • Size

    5.3MB

  • Sample

    240130-xs8xwsccfr

  • MD5

    0b01ec2c4b4faac5d7591c9b17d75d2d

  • SHA1

    a28a8431348d751709887d1293c80237782ab6b6

  • SHA256

    e2342e90d6baeda675e92025124c05266e4b99f251d967ff6a49ac65fa385060

  • SHA512

    b1e8ce594be3b14968899c3be2c8bf8e583645beb3e3ec383821fcac0b8c8bbd4ff72c32bd11fed4194fd2e0b00cc53652d16fbfec516655ec8a0472ea93b17e

  • SSDEEP

    98304:PKMBJC+aOomVZs3/H+ub898uncF7IsMZJ7ANoQbz5MYverP6JU+B59yO4SO:Ph++zg3/Hbb8GunsmJgMijJUnO

Score
10/10
povertystealerspywarestealer

Malware Config

Targets

    • Target

      Meow.exe

    • Size

      5.3MB

    • MD5

      0b01ec2c4b4faac5d7591c9b17d75d2d

    • SHA1

      a28a8431348d751709887d1293c80237782ab6b6

    • SHA256

      e2342e90d6baeda675e92025124c05266e4b99f251d967ff6a49ac65fa385060

    • SHA512

      b1e8ce594be3b14968899c3be2c8bf8e583645beb3e3ec383821fcac0b8c8bbd4ff72c32bd11fed4194fd2e0b00cc53652d16fbfec516655ec8a0472ea93b17e

    • SSDEEP

      98304:PKMBJC+aOomVZs3/H+ub898uncF7IsMZJ7ANoQbz5MYverP6JU+B59yO4SO:Ph++zg3/Hbb8GunsmJgMijJUnO

    Score
    10/10
    povertystealerstealerspyware

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks