Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
24-01-2025 01:35
General
-
Target
80a13e448f8b3bae3538712a7caea309e7cd6f24151becf366a8291cb24368be.exe
-
Size
2.8MB
-
MD5
cf48ada956599fbeb1e439e4e76c6146
-
SHA1
50b5cbc9cbb0a3c402f9a781eb66bc7c66aad5b9
-
SHA256
80a13e448f8b3bae3538712a7caea309e7cd6f24151becf366a8291cb24368be
-
SHA512
823bbd740a48d07aedbb9753d9e7c9affe05be984d8d418451e35512dd5b0c7369521503587989f908c8320a80fe94198195b78ae9baf0c1cf1dfb2c6a549a5b
-
SSDEEP
49152:3U0lOOUe8FdOIyVX65rcGDnmOOGG+o6MjxfeuDZvf5tn:EoLUDnOiQ/
Score
10/10
Malware Config
Signatures
-
Detect Poverty Stealer Payload 4 IoCs
-
Poverty Stealer
Poverty Stealer is a crypto and infostealer written in C++.
-
Povertystealer family
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\80a13e448f8b3bae3538712a7caea309e7cd6f24151becf366a8291cb24368be.exe"C:\Users\Admin\AppData\Local\Temp\80a13e448f8b3bae3538712a7caea309e7cd6f24151becf366a8291cb24368be.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
2.8MB
-
Filesize
40KB
-
Filesize
2.8MB