Overview

overview

10

Static

static

10

mods menu gta.exe

windows10-1703-x64

10

mods menu gta.exe

windows7-x64

10

mods menu gta.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mods menu gta.exe

  • Size

    1.1MB

  • Sample

    230119-n3lqnscg6y

  • MD5

    7615fb83ceebb11399c16d37c2fa44a9

  • SHA1

    d1b4659e1bdb35d0608fe4a977eb34e09ac94725

  • SHA256

    953b70a254e916b3f3c243b724e86ad7089e5683958e8b7ea743efd4c374a269

  • SHA512

    acf7d1f8c139fad7a755bde5bf0cc481b936c538c55f44799a7802d4a4e82a90a9533c61ba9e6f3d97c117f7f739f1c75d078e963ad5df7280d1e1a850057c3f

  • SSDEEP

    24576:ZoNNXaV9x4IUgs36BUI2So5+jnzFoCaGApu84:Ze0T+Sk6BU7HIFo7G98

Score
10/10
stormkittyspywarestealer

Malware Config

Targets

    • Target

      mods menu gta.exe

    • Size

      1.1MB

    • MD5

      7615fb83ceebb11399c16d37c2fa44a9

    • SHA1

      d1b4659e1bdb35d0608fe4a977eb34e09ac94725

    • SHA256

      953b70a254e916b3f3c243b724e86ad7089e5683958e8b7ea743efd4c374a269

    • SHA512

      acf7d1f8c139fad7a755bde5bf0cc481b936c538c55f44799a7802d4a4e82a90a9533c61ba9e6f3d97c117f7f739f1c75d078e963ad5df7280d1e1a850057c3f

    • SSDEEP

      24576:ZoNNXaV9x4IUgs36BUI2So5+jnzFoCaGApu84:Ze0T+Sk6BU7HIFo7G98

    Score
    10/10
    stormkittyspywarestealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks