povertystealer | c2a7c4875555a3e59ee7a77d022f2a65b3d2ac2899792f79c3a5d472d2e8db92 | Triage

Submit
Reports

Overview

overview

Static

static

1

TrnRv9y.exe

windows11-21h2-x64

Sharing

General

Target

TrnRv9y.exe
Size

1.5MB
Sample

250311-ndm77s1ky4
MD5

3be69ef62f3385d70dd119e77464cc4e
SHA1

97434913f4462e1f397253f79db671717a43818c
SHA256

c2a7c4875555a3e59ee7a77d022f2a65b3d2ac2899792f79c3a5d472d2e8db92
SHA512

93eb1bd8c97b711a88ef63ce16a2c0aab86bde081ae6a2737d4d7bdb6e5605b43ed2865e26353d4a1a2e9b7eed9f428b03e56ae79381fd06f41343f3e5b39bd9
SSDEEP

24576:YDn5tw2ABdWDp7g9aMU3zk5Q+Vtb94XClzoEVHBN:Yz8q+VtB4XPEVHBN

Score

10^/10

povertystealer discovery stealer

Static task

static1

Behavioral task

behavioral1

Sample

TrnRv9y.exe

Resource

win11-20250217-en

povertystealer discovery stealer

windows11-21h2-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  TrnRv9y.exe
- Size
  
  1.5MB
- MD5
  
  3be69ef62f3385d70dd119e77464cc4e
- SHA1
  
  97434913f4462e1f397253f79db671717a43818c
- SHA256
  
  c2a7c4875555a3e59ee7a77d022f2a65b3d2ac2899792f79c3a5d472d2e8db92
- SHA512
  
  93eb1bd8c97b711a88ef63ce16a2c0aab86bde081ae6a2737d4d7bdb6e5605b43ed2865e26353d4a1a2e9b7eed9f428b03e56ae79381fd06f41343f3e5b39bd9
- SSDEEP
  
  24576:YDn5tw2ABdWDp7g9aMU3zk5Q+Vtb94XClzoEVHBN:Yz8q+VtB4XPEVHBN
Score

10^/10

povertystealer discovery stealer
- Detect Poverty Stealer Payload
- Poverty Stealer
  Poverty Stealer is a crypto and infostealer written in C++.
  stealer povertystealer
- Povertystealer family
  povertystealer
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

povertystealerdiscoverystealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.