Overview

overview

10

Static

static

10

dridex

windows10-2004_x64

10

Analysis

  • max time kernel
    5s
  • max time network
    11s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    03/02/2022, 12:33

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0.exe
  • Size 74KB
  • Sample220203-prdrcshba6
  • SHA256 ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0
  • MD5 SHA1 SHA512
Score
10/10
stormkittystealer

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • StormKitty

    StormKitty is an open source info stealer written in C#.

    stealerstormkitty
  • StormKitty Payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0.exe
    "C:\Users\Admin\AppData\Local\Temp\ad672b57e920a9dcd84f75423a250a00165b6555b4524c40475a5a3f5d67f5c0.exe"
    1⤵
      PID:3148

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/3148-130-0x00000000003F0000-0x0000000000408000-memory.dmp
          Download