General

  • Target
    ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
  • Size 74KB
  • Sample220203-prdrcshba6
  • SHA256 ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
    • Size 74KB
    • SHA256 ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
    • MD5 SHA1 SHA512
    Score
    10/10
    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty Payload

MITRE ATT&CK Matrix

Tasks