Behavioral task
behavioral1
Sample
auisdgiasdasda.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
auisdgiasdasda.exe
Resource
win10v2004-20221111-en
General
-
Target
auisdgiasdasda.exe
-
Size
1.1MB
-
MD5
1fd43c8c27a3b7a85f444011b8abf4b9
-
SHA1
e3a24e31722f01d941119f34a930982bb869f9a3
-
SHA256
ec293304d525955a9db22a5a3ca9bcd2870a33e230426a7dbdb6da4724ed4155
-
SHA512
857abbdc09b226e41c8063ed82cfa0f4c8cc30de4f4cec48be59ce2469c6c6934337acde0b8bb1927b9f1bd1bbc402e07994f51d0a0021f109ea3a71ac920986
-
SSDEEP
24576:LvNNXaV9x4IUgs36BUI2So5+jnzFoCaGApu8:L10T+Sk6BU7HIFo7G98
Malware Config
Signatures
-
StormKitty payload 1 IoCs
resource yara_rule sample family_stormkitty -
Stormkitty family
Files
-
auisdgiasdasda.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ