Overview

overview

10

Static

static

3

SharpMoon/...me.exe

windows7-x64

10

SharpMoon/...me.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b032490016d6cd681f8e8900e7dfd17a6953d264e01f7d80a97a04e1d8e97c2c

  • Size

    1.3MB

  • Sample

    250126-p2y52s1qgx

  • MD5

    4c60ab261eb67cf6857ae09784200736

  • SHA1

    8b32e9f7fd46a806f93607a38c45de2e11d1f4fd

  • SHA256

    b032490016d6cd681f8e8900e7dfd17a6953d264e01f7d80a97a04e1d8e97c2c

  • SHA512

    bc599ed695770709fd764b3e97fb873c54bd071578d8b8c9d741a95fd3d825b6d2c53bdc2a94ed372419710d38d60e1fe180151bf9f6e381e403cd6ae4e0286a

  • SSDEEP

    24576:Vgi/FV/duHPczKGZeTLPoyknXepntoLjBD4nHwhadXJ5OZYgZPgeKQLwWF:VgcFxQGZeTLSXQuLd4nHwhPYgBge5T

Score
10/10
povertystealerdiscoverystealer

Malware Config

Targets

    • Target

      SharpMoon/MoonGame.exe

    • Size

      438KB

    • MD5

      090509968533796ada2d9b1b6b3de3be

    • SHA1

      b0c740df1b2f6985cddb9a58168ef2961bbdfb7d

    • SHA256

      1ef4711e76d70c609981ac15c13aa19f178805a8598ec7934aa3863a01c31344

    • SHA512

      9ac0504e8f5a5ef7b471a34dcccb0704e57f24f53cc66a2f5a0291769c922a3837e6f38680043edcb4aed879f1475668cf0bba5b8dcf11a60d39a6ab3e03d06b

    • SSDEEP

      12288:Nig9YRZPIy9PEugnCygfryb3G4WBVSNQG:AYsZPpPEug3h24WBVSp

    Score
    10/10
    povertystealerdiscoverystealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Povertystealer family

      povertystealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks