Overview

overview

10

Static

static

1

Photoshop.exe

windows7-x64

10

Photoshop.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Photoshop.exe

  • Size

    3.0MB

  • Sample

    240304-wgaqaahg55

  • MD5

    a8048bd6fc7d336d7f6e0fd6800da673

  • SHA1

    f28db14f2884ac1db0ce53a7ec7bee572541d902

  • SHA256

    d7414d6e34052bd4194ebf979a405af4e0d39b42b6d4d6ad31db85fd78dcc31d

  • SHA512

    570d1ac52dcb8f6c67983a4af99fece9f47e03beba83b9b2c95ce544f5b5f40c8c7e46019f5e106b258de2affee91988053dbab9e777e1c115d3803513eea066

  • SSDEEP

    49152:zR5PaMqlX9BK+ndEBk6/HOg7wFXW3zrFlvmh+JJRV8EeCrXy7295sAZub1R:zR59qtaBk0HOXXWHbbbrNub

Score
10/10
povertystealerstealer

Malware Config

Targets

    • Target

      Photoshop.exe

    • Size

      3.0MB

    • MD5

      a8048bd6fc7d336d7f6e0fd6800da673

    • SHA1

      f28db14f2884ac1db0ce53a7ec7bee572541d902

    • SHA256

      d7414d6e34052bd4194ebf979a405af4e0d39b42b6d4d6ad31db85fd78dcc31d

    • SHA512

      570d1ac52dcb8f6c67983a4af99fece9f47e03beba83b9b2c95ce544f5b5f40c8c7e46019f5e106b258de2affee91988053dbab9e777e1c115d3803513eea066

    • SSDEEP

      49152:zR5PaMqlX9BK+ndEBk6/HOg7wFXW3zrFlvmh+JJRV8EeCrXy7295sAZub1R:zR59qtaBk0HOXXWHbbbrNub

    Score
    10/10
    povertystealerstealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks