General

  • Target

    04eb5220f7d49967abd241b7d1305ed0N.exe

  • Size

    5.0MB

  • Sample

    240722-y7nqyaxalp

  • MD5

    04eb5220f7d49967abd241b7d1305ed0

  • SHA1

    765970e8fb9c7e306c9bbe20f816b8f143a1e232

  • SHA256

    6359aa408276731df5b47da14a98ebc3fd3d99b00f4386d9ee99787a622c41fc

  • SHA512

    4700b6b6ac13ceb0f11e8a76fd7c5a312839b5ce0ef5ed41db22c7358a653d7706110ca9455436890dd8eba39976a68b74b682e41c36ebb70744e46098a25fe6

  • SSDEEP

    98304:jgmjKDb77FQSsbxkrqa/sJ41vFpdvUdhsWBY42DCp78zH/e5:BbtFGrshF3oCpyH/

Malware Config

Targets

    • Target

      04eb5220f7d49967abd241b7d1305ed0N.exe

    • Size

      5.0MB

    • MD5

      04eb5220f7d49967abd241b7d1305ed0

    • SHA1

      765970e8fb9c7e306c9bbe20f816b8f143a1e232

    • SHA256

      6359aa408276731df5b47da14a98ebc3fd3d99b00f4386d9ee99787a622c41fc

    • SHA512

      4700b6b6ac13ceb0f11e8a76fd7c5a312839b5ce0ef5ed41db22c7358a653d7706110ca9455436890dd8eba39976a68b74b682e41c36ebb70744e46098a25fe6

    • SSDEEP

      98304:jgmjKDb77FQSsbxkrqa/sJ41vFpdvUdhsWBY42DCp78zH/e5:BbtFGrshF3oCpyH/

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks