General

  • Target

    ac83ee8e909f55b86251b145cfa42c66.exe

  • Size

    90KB

  • Sample

    240730-f11stavank

  • MD5

    ac83ee8e909f55b86251b145cfa42c66

  • SHA1

    ca465e5d157330d98feac14a18f6a252162cd270

  • SHA256

    bc4a818268862ec3af1e56dd94c9958e18bde15be09e9412a802903c3ff6dacd

  • SHA512

    dcd57a67726525d5f12d19a37e65eb4de5539599efa7a9781c008eda1b710172f44a79603ebd15b42707210091a1b6cfefec2959d71efbcfaf59914a3e380323

  • SSDEEP

    1536:WWayDEpCdzqHFv8FIcHFbd8iZyACQk6r4L8mPaNJNUzLata/fn:WWayDEpC4vTclTycke4o0aNzUF3

Malware Config

Targets

    • Target

      ac83ee8e909f55b86251b145cfa42c66.exe

    • Size

      90KB

    • MD5

      ac83ee8e909f55b86251b145cfa42c66

    • SHA1

      ca465e5d157330d98feac14a18f6a252162cd270

    • SHA256

      bc4a818268862ec3af1e56dd94c9958e18bde15be09e9412a802903c3ff6dacd

    • SHA512

      dcd57a67726525d5f12d19a37e65eb4de5539599efa7a9781c008eda1b710172f44a79603ebd15b42707210091a1b6cfefec2959d71efbcfaf59914a3e380323

    • SSDEEP

      1536:WWayDEpCdzqHFv8FIcHFbd8iZyACQk6r4L8mPaNJNUzLata/fn:WWayDEpC4vTclTycke4o0aNzUF3

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks