Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27ae0c25472fe22bbf6b33c2abc2ff061a540ccee039cbcda77c39ab4f0b9479

  • Size

    9.5MB

  • Sample

    240725-2hp49aygqq

  • MD5

    7e10bd91154eca00420a74abb9967915

  • SHA1

    4b59eec6aee1919dd17df3c4809689c5265a7077

  • SHA256

    27ae0c25472fe22bbf6b33c2abc2ff061a540ccee039cbcda77c39ab4f0b9479

  • SHA512

    58153a0f33a2d0dc1a6c033a6a67ef3ff5f4714a0911cfc4aa008468e714d0d771748ab61346ad56d2652a7c0f6b44937915d84b0a2bdad2794919bbfae13cdb

  • SSDEEP

    196608:VzOw9OJLCt1+xIKDYd23u9tUebJSHZYuw7hewLK50aBOS:V9Toe9DSHZ+hZLe3OS

Score
10/10
povertystealercredential_accessdiscoveryspywarestealer

Malware Config

Targets

    • Target

      27ae0c25472fe22bbf6b33c2abc2ff061a540ccee039cbcda77c39ab4f0b9479

    • Size

      9.5MB

    • MD5

      7e10bd91154eca00420a74abb9967915

    • SHA1

      4b59eec6aee1919dd17df3c4809689c5265a7077

    • SHA256

      27ae0c25472fe22bbf6b33c2abc2ff061a540ccee039cbcda77c39ab4f0b9479

    • SHA512

      58153a0f33a2d0dc1a6c033a6a67ef3ff5f4714a0911cfc4aa008468e714d0d771748ab61346ad56d2652a7c0f6b44937915d84b0a2bdad2794919bbfae13cdb

    • SSDEEP

      196608:VzOw9OJLCt1+xIKDYd23u9tUebJSHZYuw7hewLK50aBOS:V9Toe9DSHZ+hZLe3OS

    Score
    10/10
    povertystealercredential_accessdiscoveryspywarestealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks