MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3da5ad345fa5dc65c5313a0846897ba696630e1b4c6b9388e7a479edce27745e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



StrongPity


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 3da5ad345fa5dc65c5313a0846897ba696630e1b4c6b9388e7a479edce27745e
SHA3-384 hash: 90050f0f6486b9c523d16b10003470d650152624e11016f9c4610f882e65d2e28caceaac529d8f2b482bbd9a425c4dc5
SHA1 hash: 5c5b0bce15c89cb7df6af814ebdbac76b7df91cb
MD5 hash: 989af6e0bb7fa4d62815f4fdc4696b85
humanhash: fanta-steak-tennis-berlin
File name:3da5ad345fa5dc65c5313a0846897ba696630e1b4c6b9388e7a479edce27745e.bin
Download: download sample
Signature StrongPity
File size:179'200 bytes
First seen:2020-10-12 16:53:52 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash b14a9a4904bcc393db5177926b2f7f67 (3 x StrongPity)
ssdeep 3072:aQa4evEplKSvHtI21WMUfgfp/P0BES62FjPIhIPFJRAhP2EAeOcSt:pa4JL1ISYPZDeP6t
Threatray 2 similar samples on MalwareBazaar
TLSH 19048E12B9C08472D4761D318576DAA15A7DFC301E348AAB23D512BF1FB42D06A3AEF7
Reporter Arkbird_SOLG
Tags:apt StrongPity


Avatar
ArkbirdDevil
https://malpedia.caad.fkie.fraunhofer.de/details/win.strongpity

Intelligence


File Origin
# of uploads :
1
# of downloads :
1'598
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:

Behaviour
Sending a UDP request
DNS request
Sending a custom TCP request
Result
Threat name:
StrongPity
Detection:
malicious
Classification:
troj
Score:
68 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)
Yara detected StrongPity
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.StrongPity
Status:
Malicious
First seen:
2020-09-29 16:37:11 UTC
AV detection:
25 of 29 (86.21%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Unpacked files
SH256 hash:
3da5ad345fa5dc65c5313a0846897ba696630e1b4c6b9388e7a479edce27745e
MD5 hash:
989af6e0bb7fa4d62815f4fdc4696b85
SHA1 hash:
5c5b0bce15c89cb7df6af814ebdbac76b7df91cb
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments