General

  • Target

    http://www.mediafire.com/file/qzqx86taavvynwl/sansayrex.rar/file

  • Sample

    250303-ajh9jszvdw

Malware Config

Targets

    • Target

      http://www.mediafire.com/file/qzqx86taavvynwl/sansayrex.rar/file

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

    • Povertystealer family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks