Overview

overview

10

Static

static

can.exe

windows7_x64

10

can.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    can.exe

  • Size

    1.0MB

  • Sample

    210713-pbxy2ps4yx

  • MD5

    5f70bb21955777e10ca01ead27d16b44

  • SHA1

    2f7d8adfb506718346d94177103d1d976380a9b4

  • SHA256

    84c1024292142c4d234701e830aedcbd865311693f0d8ac75596deee268c7db5

  • SHA512

    69f55a7902a4241c008c745a8f3bbc261bf0f9698f0b0b93aafb6ab8ce47b4e0eba47879e32404d6c3cdfab14cf55f60d5de4c34050bcb377f7f92a5a1ed16f4

Score
10/10
a310loggerstormkittyspywarestealer

Malware Config

Targets

    • Target

      can.exe

    • Size

      1.0MB

    • MD5

      5f70bb21955777e10ca01ead27d16b44

    • SHA1

      2f7d8adfb506718346d94177103d1d976380a9b4

    • SHA256

      84c1024292142c4d234701e830aedcbd865311693f0d8ac75596deee268c7db5

    • SHA512

      69f55a7902a4241c008c745a8f3bbc261bf0f9698f0b0b93aafb6ab8ce47b4e0eba47879e32404d6c3cdfab14cf55f60d5de4c34050bcb377f7f92a5a1ed16f4

    Score
    10/10
    a310loggerstormkittyspywarestealer

    • A310logger

      A310 Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

      stealerspywarea310logger

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty Payload

    • A310logger Executable

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks