stormkitty | 37e3a147b97e7c20786d570c9469a77a57a4965daa01ceae64a39496bf70b385 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37e3a147b97e7c20786d570c9469a77a57a4965daa01ceae64a39496bf70b385
Size

2.9MB
MD5

80927ed0851affd39e187c737d2f62d7
SHA1

0a91f5e8804ec23dc27855e79b94951259c1d8ce
SHA256

37e3a147b97e7c20786d570c9469a77a57a4965daa01ceae64a39496bf70b385
SHA512

6a7c4a34bf17ee37a0a8802e7edbbea2e8366e8698ea188376fbfef78106f72adbc8b07be56be56be63cb4f268c9d064e7111afe1a95c75966539c402d18a0bd
SSDEEP

49152:MjdNYoYW4IETrsgUvu9N8ivdKDhA+WsPP6QmUTftIsmNm/5XhG34AiROr2J3Y2pN:MPYVrsk9N8ivyhAdsPSQxgU11lwr2Joy

Score

10^/10

stormkitty

Malware Config

Signatures

StormKitty payload 1 IoCs

resource	yara_rule
sample	family_stormkitty

Stormkitty family
stormkitty

Files

37e3a147b97e7c20786d570c9469a77a57a4965daa01ceae64a39496bf70b385
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ