Overview

overview

10

Static

static

10

97c98411d5...95.exe

windows10-2004-x64

10

Resubmissions

20-09-2022 07:52

220920-jqjckafhfk 10

19-09-2022 12:24

220919-pk33nsgeh4 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97c98411d57bd2486d75d0665c0f84cd5aeed35c11e9ef59d649ab7daab9c595

  • Size

    68KB

  • Sample

    220920-jqjckafhfk

  • MD5

    0329ab313b052d58cfbd3f072dbf6df9

  • SHA1

    64e81d3217bd7370e5df771f644f233522b348cd

  • SHA256

    97c98411d57bd2486d75d0665c0f84cd5aeed35c11e9ef59d649ab7daab9c595

  • SHA512

    a783c5c815bb4a6d88e8c73ff5bf79ecbe473d4c82eac369f2b8a3ab19436fb831a2fb04b393ec5e0b7d73582d110eb2fb23d6c0f28fd277b452ccbdda48827b

  • SSDEEP

    1536:7T/1MlnBYeutFxxqdm55TTPKIBaDmk2cTvCwwO78NNtSIF5tc:7ABYeutFxxcm5RNBaDmk3z2O78NNtSIO

Score
10/10
stormkittycollectionspywarestealer

Malware Config

Targets

    • Target

      97c98411d57bd2486d75d0665c0f84cd5aeed35c11e9ef59d649ab7daab9c595

    • Size

      68KB

    • MD5

      0329ab313b052d58cfbd3f072dbf6df9

    • SHA1

      64e81d3217bd7370e5df771f644f233522b348cd

    • SHA256

      97c98411d57bd2486d75d0665c0f84cd5aeed35c11e9ef59d649ab7daab9c595

    • SHA512

      a783c5c815bb4a6d88e8c73ff5bf79ecbe473d4c82eac369f2b8a3ab19436fb831a2fb04b393ec5e0b7d73582d110eb2fb23d6c0f28fd277b452ccbdda48827b

    • SSDEEP

      1536:7T/1MlnBYeutFxxqdm55TTPKIBaDmk2cTvCwwO78NNtSIF5tc:7ABYeutFxxcm5RNBaDmk3z2O78NNtSIO

    Score
    10/10
    stormkittycollectionspywarestealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks