Overview

overview

10

Static

static

3

0b6604d2e6...f7.exe

windows7-x64

10

0b6604d2e6...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b6604d2e6086f7322c634ab925bdc381fe720a2a12f254e5b63b42f89b680f7.exe

  • Size

    185KB

  • Sample

    241127-cjazaa1mgt

  • MD5

    9c433a245d7737ca7fa17490e460f14e

  • SHA1

    31e6388f4e45a97a97ac0f34c26a9858ef8dcdb9

  • SHA256

    0b6604d2e6086f7322c634ab925bdc381fe720a2a12f254e5b63b42f89b680f7

  • SHA512

    edaf8ff778db40dfcacd7c8cb5cef598dc7c13ebfb6b4f8e828c0697b24115f637ac510c945d31b1c4873d39fca7d8be7b03ba6dc64e665def6bf2d058a00c95

  • SSDEEP

    3072:1VUaad8eqre/E0fYSB0ih9FHax2OdA1hBB/1lQaejhvltBNTE63yMnHpeGlI4yBt:3Dad8trC7f710UOdc/0bBNTE63yxcXqt

Score
10/10
povertystealerdiscoveryspywarestealer

Malware Config

Targets

    • Target

      0b6604d2e6086f7322c634ab925bdc381fe720a2a12f254e5b63b42f89b680f7.exe

    • Size

      185KB

    • MD5

      9c433a245d7737ca7fa17490e460f14e

    • SHA1

      31e6388f4e45a97a97ac0f34c26a9858ef8dcdb9

    • SHA256

      0b6604d2e6086f7322c634ab925bdc381fe720a2a12f254e5b63b42f89b680f7

    • SHA512

      edaf8ff778db40dfcacd7c8cb5cef598dc7c13ebfb6b4f8e828c0697b24115f637ac510c945d31b1c4873d39fca7d8be7b03ba6dc64e665def6bf2d058a00c95

    • SSDEEP

      3072:1VUaad8eqre/E0fYSB0ih9FHax2OdA1hBB/1lQaejhvltBNTE63yMnHpeGlI4yBt:3Dad8trC7f710UOdc/0bBNTE63yxcXqt

    Score
    10/10
    povertystealerdiscoveryspywarestealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Povertystealer family

      povertystealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks