Overview

overview

10

Static

static

3

725a272d58...23.exe

windows7-x64

10

725a272d58...23.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    725a272d58c38263bac81cc348f27923.exe

  • Size

    1.6MB

  • Sample

    240207-hlx5gsedb8

  • MD5

    725a272d58c38263bac81cc348f27923

  • SHA1

    940380233efcda57a22341e09515696d6b80bc25

  • SHA256

    b60c3215377f38a632dab305b8793a1e663cf95f8c98b884aa1cba5700e227ee

  • SHA512

    55d9e6a2fc3b39f8ef333cef91c9c131039a8cffd9f353c5ee68aba3c35efa4f23928196fc89a9d633413287c084ad1bd6628ba92725f8e5ee8dafca9835691c

  • SSDEEP

    24576:GubsnafAPyjSzZX6h6JbMwmULKfCgG07jgLkx0gW9Tm8nnlLclRPPYpyrQRlRdWV:YI4sMb+fZ3Px0gW9Tznnlc4IQrjWd7

Score
10/10
povertystealerspywarestealer

Malware Config

Targets

    • Target

      725a272d58c38263bac81cc348f27923.exe

    • Size

      1.6MB

    • MD5

      725a272d58c38263bac81cc348f27923

    • SHA1

      940380233efcda57a22341e09515696d6b80bc25

    • SHA256

      b60c3215377f38a632dab305b8793a1e663cf95f8c98b884aa1cba5700e227ee

    • SHA512

      55d9e6a2fc3b39f8ef333cef91c9c131039a8cffd9f353c5ee68aba3c35efa4f23928196fc89a9d633413287c084ad1bd6628ba92725f8e5ee8dafca9835691c

    • SSDEEP

      24576:GubsnafAPyjSzZX6h6JbMwmULKfCgG07jgLkx0gW9Tm8nnlLclRPPYpyrQRlRdWV:YI4sMb+fZ3Px0gW9Tznnlc4IQrjWd7

    Score
    10/10
    povertystealerspywarestealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks