General

  • Target

    a2cca73f263f0bd9e12f682a2ee3598e25403fa33a953a680062b78a52d7662c

  • Size

    199KB

  • Sample

    240225-p67mzsch7w

  • MD5

    c5bcb1322acea40d4e8a01ac3a205604

  • SHA1

    664493247dd1d219b34e501078b47cba03e2d094

  • SHA256

    a2cca73f263f0bd9e12f682a2ee3598e25403fa33a953a680062b78a52d7662c

  • SHA512

    bb4f2dfa72e2ff3985c7f8f5b9115e47b3eb5c0967a04cb88c268510be566a2e45e51ff64738a732ff35a69e8b43c2b659094dc087f3ddbe38b78b7d54da1430

  • SSDEEP

    3072:6DKW1FgppLRHMY0TBfJvjcTp5X73E4hm8gFTQuTGOGHcED:6DKW1Fgbdl0TBBvjc/CC9Zt

Malware Config

Targets

    • Target

      a2cca73f263f0bd9e12f682a2ee3598e25403fa33a953a680062b78a52d7662c

    • Size

      199KB

    • MD5

      c5bcb1322acea40d4e8a01ac3a205604

    • SHA1

      664493247dd1d219b34e501078b47cba03e2d094

    • SHA256

      a2cca73f263f0bd9e12f682a2ee3598e25403fa33a953a680062b78a52d7662c

    • SHA512

      bb4f2dfa72e2ff3985c7f8f5b9115e47b3eb5c0967a04cb88c268510be566a2e45e51ff64738a732ff35a69e8b43c2b659094dc087f3ddbe38b78b7d54da1430

    • SSDEEP

      3072:6DKW1FgppLRHMY0TBfJvjcTp5X73E4hm8gFTQuTGOGHcED:6DKW1Fgbdl0TBBvjc/CC9Zt

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks