Analysis
-
max time kernel
61s -
max time network
63s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
31-03-2023 05:28
General
-
Target
Prynt Stealer 5.6fixed.exe
-
Size
378KB
-
MD5
914c3ed0bc1e3014e15b17d87a61f7c4
-
SHA1
9df55d26eb513d1916faab783c60f5b20cec8bc5
-
SHA256
9a9a42bc0f7b7636a202561359da1098d2f4c45f27e80fdd062050a369e69a51
-
SHA512
3ea3481377efe7b1873c7ab90719786aa2d9f82cdf75f243b27c6918280430bbee78833fba18dd5d69df3caf596c82faa481cad78aa64fdb7a6758b8b9161cde
-
SSDEEP
6144:qTWgV4CTshTKxoGEflVecSEuNYnMuBAnLzuyvwWoSF45AcTG8OnXKxQmqbAQ4jeI:qTWwshTKxoGEflsFEuNYB8z1wWo4sAIx
Score
10/10
Malware Config
Signatures
-
StormKitty
StormKitty is an open source info stealer written in C#.
-
StormKitty payload 1 IoCs
-
Obfuscated with Agile.Net obfuscator 6 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Prynt Stealer 5.6fixed.exe"C:\Users\Admin\AppData\Local\Temp\Prynt Stealer 5.6fixed.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
408KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
128KB
-
Filesize
80KB
-
Filesize
1.3MB
-
Filesize
56KB
-
Filesize
120KB
-
Filesize
1.3MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB