Overview

overview

10

Static

static

ebb56a6e94...f8.exe

windows7_x64

10

ebb56a6e94...f8.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebb56a6e94862c64dd204246376819f8.exe

  • Size

    933KB

  • Sample

    210712-z2kzsf3386

  • MD5

    ebb56a6e94862c64dd204246376819f8

  • SHA1

    b4be3ca5db209dd913f9c07fa54578fcd5b45b32

  • SHA256

    f66e5f355ec3477cc1be168b9fec2f85d2c58106460d988dd96855f8c78b3fe8

  • SHA512

    e4c538a6063133485f13a1831eac86fd96eb689ba9fff8f0306402bdb6c9f013cdc8ac5a6f46fdf97397da679e1ee4c5af655582c9229192e88546e57b6e9926

Score
10/10
a310loggerstormkittyspywarestealer

Malware Config

Targets

    • Target

      ebb56a6e94862c64dd204246376819f8.exe

    • Size

      933KB

    • MD5

      ebb56a6e94862c64dd204246376819f8

    • SHA1

      b4be3ca5db209dd913f9c07fa54578fcd5b45b32

    • SHA256

      f66e5f355ec3477cc1be168b9fec2f85d2c58106460d988dd96855f8c78b3fe8

    • SHA512

      e4c538a6063133485f13a1831eac86fd96eb689ba9fff8f0306402bdb6c9f013cdc8ac5a6f46fdf97397da679e1ee4c5af655582c9229192e88546e57b6e9926

    Score
    10/10
    a310loggerstormkittyspywarestealer

    • A310logger

      A310 Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

      stealerspywarea310logger

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty Payload

    • A310logger Executable

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks