povertystealer | 9b85fb69d2828fe57a9994afa64905970a9941e809a3a3c6be8a87159f72f1c8

Sharing

Copy URL

Twitter E-mail

General

Target

BinanceSetup.zip
Size

27.0MB
Sample

240729-t5h1fsxhkq
MD5

04802bb6b194d13af0f245381398e18e
SHA1

3200505a87c83845df39d7695d00dbb70c03f8e6
SHA256

9b85fb69d2828fe57a9994afa64905970a9941e809a3a3c6be8a87159f72f1c8
SHA512

977e3ebd9941d2428cc6d5d0f3ba3e108a3f7208bb9d3199940836268c1c6ddbacca76b968f1e1d3659efb496ff8647c087395a71c3852fff6b9bda3d32cde3e
SSDEEP

786432:Smtnnji7lAXobbSqxaSICEebWRrhh1kGXef:vnjmlAYKqxWCPOL1jG

Score

10^/10

Malware Config

Targets

- Target
  
  Binance.exe
- Size
  
  470KB
- MD5
  
  1b54ae4ceffb558dfbe1f0acef0a1f66
- SHA1
  
  fb58101496693ed1e235f5a9aabbe54474383b83
- SHA256
  
  90fd1c4de7f75213f1f37ecd7b4b8729e844f6e2874af5d7e55e69a04506bbaf
- SHA512
  
  d6482554ca5bb4e3c6ad8d1e79db4dd7df29ad64d426667a8d652f8891d6b218bfd934e9c9e57c71c6ba7756d23387b66d82498778787a53e15710762f08b0e1
- SSDEEP
  
  6144:0Jep2sd6Eto9Eu9P/zpTH+McvYBgB5V5TtiAF4RpZdlyg4gCOWOc6vRom:0Jc24S95+neAV5xHs748HvRom
Score

10^/10

povertystealer credential_access discovery spyware stealer
- Detect Poverty Stealer Payload
- Poverty Stealer
  Poverty Stealer is a crypto and infostealer written in C++.
  stealer povertystealer
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of SetThreadContext
behavioral1
- Target
  
  d3dcompiler_47.dll
- Size
  
  4.7MB
- MD5
  
  2191e768cc2e19009dad20dc999135a3
- SHA1
  
  f49a46ba0e954e657aaed1c9019a53d194272b6a
- SHA256
  
  7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
- SHA512
  
  5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
- SSDEEP
  
  49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
Score

1^/10
behavioral2
- Target
  
  ffmpeg.dll
- Size
  
  2.7MB
- MD5
  
  ce613fb05afd722fac05a28d6e935cd4
- SHA1
  
  d96ae5969cb134a8686d8ae72be304848a4d1f0e
- SHA256
  
  742c956f892ad0833a5b8c52d19aa69940bc15bedbb42890598df61b263f6fed
- SHA512
  
  c886e1e1e24e4b3320842127a7464a1baae93b0f791c7fff06af3ae1d7c312ae490f7d5f41c6d857b1be9da39c63e468b7ac6493ba7ee9e2ebf5e6344acda7d3
- SSDEEP
  
  49152:k8h7ilnY895zc09Myl6QL3n6F+hTf6yfPvJr8PNStFwLluJMWykOFc:+n1H9MDCn6OFMWyBc
Score

1^/10
behavioral3
- Target
  
  locales/vk_swiftshader.dll
- Size
  
  4.9MB
- MD5
  
  e53fd0779465c910b275f93abafa6e3e
- SHA1
  
  f38f2711805d08b4b6d29b0a49253db0da939fcd
- SHA256
  
  58e2b5ab33366550207ed8e1f420b24c94b19fbe8e753f5a6c038beb829533a7
- SHA512
  
  934e8e68042d1adcf17efc1fbe728930ecb2d6cbc0fd60ad064e28e18ed2a57fffc7331b2eb807f6972c0c37bb9acc69c97a137b264efab67e180a8fe0d1cdc3
- SSDEEP
  
  49152:z6PkZFjKeDTIEvAvlo6coVQxa8sVr0yN1J+MuXy557nDOPNt7wpr30sN+05uQKY1:zNZFjAgpOz2VeCCAkEvkCvGZf9z
Score

1^/10
behavioral4
- Target
  
  locales/vulkan-1.dll
- Size
  
  917KB
- MD5
  
  5148e286ea76b5c3a01656a84548d035
- SHA1
  
  9f90b7523c64c62d7b0adf4511b49a3f2bb022eb
- SHA256
  
  7fb87a7f0d50007dca64bf845d444fc66116a57edecdd8487c91d6879b578a0f
- SHA512
  
  23527f9eedc4873320c65b91afd90873febce3f666470dbaaa42e1165c4b864f1df19038bb272954eb2281bb103c15199c6ff25ca44c0ecbfebfa1f5b34c01d6
- SSDEEP
  
  24576:wV9nIy2kwpHHPDnCo3A1XpQ66Z5WoDYsHs6g3P0zAk7MG3:0t2zNLnxA1+66Z5WoDYsHs6g3P0zAk7v
Score

1^/10
behavioral5
- Target
  
  resource/LICENSES.chromium.html
- Size
  
  8.4MB
- MD5
  
  e400cd908b8fb7c13985e2f5cc7a7044
- SHA1
  
  bbafebdf5b067a7d7da130025851eaa52ec3c9d7
- SHA256
  
  ee3b1ab8794c749673ce9bd2dd302f12d69f0a1a4adfe40a64247746cc311829
- SHA512
  
  e7ca440f0e042d7fcfa99367426bf19899a2b227c6d7b6e2c25d4f1a40113250f21ebeaaf91067d8569dfbad1415d4fe3e5626d7254722f2778497fcb22e5d6e
- SSDEEP
  
  24576:/UrV6CI675knWSgRBPyQlrUmf1C6C6y6Z6/678HqBMUpuQ:MsWKA
Score

3^/10

discovery
behavioral6
- Target
  
  resource/libEGL.dll
- Size
  
  469KB
- MD5
  
  874b49121773393e5ab748e52c630089
- SHA1
  
  f35c93744cd2f0c178fc250116588654772d1339
- SHA256
  
  d9773c57e821ef87891375d687c68c0be75222316a666e8c49640aad80f60959
- SHA512
  
  ac8a09d44d7242d0e897ea84fa8f3f3c1d0e203fc3c03d5e62fba75f0c5e88189037145fb3548eba54c6c657af9126da96b6fa224dcbebbaa51f84f74dfa427b
- SSDEEP
  
  6144:HI9l960ewE3X883ZrzMkBmi12EvUGsADkIgHc:HClY0WM8JrzMIKOD+
Score

1^/10
behavioral7
- Target
  
  resource/libGLESv2.dll
- Size
  
  7.1MB
- MD5
  
  47fd3da85f490e65b3252c83c76e63a9
- SHA1
  
  6f799b2d5f1768682cb6d8c2407110410142444e
- SHA256
  
  49ace76d838e02994a03354e557ae65a305d9c5c8441774fa174177451e26dc9
- SHA512
  
  8df107a48ff17000ff0a59139fc545276a12355a052658d933a2681172d5bbabde48b2e17925680a80006587c318876d494096d27f0c41b281e39a5bdbd14fb7
- SSDEEP
  
  98304:Ut5gLbmQACQYA7g4fdYlDOckpKOgeSXwb:UE/AVuDSoo
Score

1^/10
behavioral8