Overview

overview

10

Static

static

1

d7414d6e34...1d.exe

windows7-x64

10

d7414d6e34...1d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8048bd6fc7d336d7f6e0fd6800da673.bin

  • Size

    2.9MB

  • Sample

    240306-cf1qjaga2s

  • MD5

    ec2879c40b6826b16f63387d35b75e90

  • SHA1

    98859ab558cfaf4418e56b540f41327f7630e251

  • SHA256

    31faa0fee4913ec40074988c164a361d45bbc434ff9345328fc126d3e5ede84b

  • SHA512

    e07bc781de89b98495bd2c7cce7854d1a946f56db4aa82496ecd061ee8ab4c652164ce54b9290dc81c55e048a56933984344b795030ce85e0504ee68f291bad6

  • SSDEEP

    49152:YOY8nH1OGpkWpD351rKGy96YGGlNlEilMJ4tKEvfsAGIkRQQ06DTrlhJl9AOn5:YOhMGpFD7r5eldmNEvfmIkRDDDTJlCO5

Score
10/10
povertystealerstealer

Malware Config

Targets

    • Target

      d7414d6e34052bd4194ebf979a405af4e0d39b42b6d4d6ad31db85fd78dcc31d.exe

    • Size

      3.0MB

    • MD5

      a8048bd6fc7d336d7f6e0fd6800da673

    • SHA1

      f28db14f2884ac1db0ce53a7ec7bee572541d902

    • SHA256

      d7414d6e34052bd4194ebf979a405af4e0d39b42b6d4d6ad31db85fd78dcc31d

    • SHA512

      570d1ac52dcb8f6c67983a4af99fece9f47e03beba83b9b2c95ce544f5b5f40c8c7e46019f5e106b258de2affee91988053dbab9e777e1c115d3803513eea066

    • SSDEEP

      49152:zR5PaMqlX9BK+ndEBk6/HOg7wFXW3zrFlvmh+JJRV8EeCrXy7295sAZub1R:zR59qtaBk0HOXXWHbbbrNub

    Score
    10/10
    povertystealerstealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks