Resubmissions

02-08-2023 15:47

230802-s777page7s 10

02-08-2023 15:41

230802-s4xlsage5z 10

General

  • Target

    https://disk.yandex.ru/d/32mWEpqwMSyjAg

  • Sample

    230802-s777page7s

Score
10/10

Malware Config

Targets

    • Target

      https://disk.yandex.ru/d/32mWEpqwMSyjAg

    Score
    10/10
    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks