Overview

overview

10

Static

static

1

URLScan

urlscan

https://www.youtube....

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://www.youtube.com/redirect?event=comments&redir_token=QUFFLUhqblR1MXNuN2FlcVo4LXhFbDR2X24yV2p5WGNyd3xBQ3Jtc0tsd0ZSN2RPNlRBR2kyYWU1YWJEaFc2dmZobXhDZzNBcmtNVnQ5RmMxbXpWMWRESUZfNmxlYk5jMmdVNEpvSzBKX0FibnF3Vl9yMFVMLWZaNE1pdzF0VUN6RVFMenZVSUVFb0ZHNjNfa0gzQlJDV2dNTQ&q=https%3A%2F%2Fmega.nz%2Ffolder%2FOZ4Q0CqL%23mBhCadtxo1EmzMm4L4XUcg

  • Sample

    240503-dmhnzaff82

Score
10/10
stormkittyspywarestealer

Malware Config

Targets

    • Target

      https://www.youtube.com/redirect?event=comments&redir_token=QUFFLUhqblR1MXNuN2FlcVo4LXhFbDR2X24yV2p5WGNyd3xBQ3Jtc0tsd0ZSN2RPNlRBR2kyYWU1YWJEaFc2dmZobXhDZzNBcmtNVnQ5RmMxbXpWMWRESUZfNmxlYk5jMmdVNEpvSzBKX0FibnF3Vl9yMFVMLWZaNE1pdzF0VUN6RVFMenZVSUVFb0ZHNjNfa0gzQlJDV2dNTQ&q=https%3A%2F%2Fmega.nz%2Ffolder%2FOZ4Q0CqL%23mBhCadtxo1EmzMm4L4XUcg

    Score
    10/10
    stormkittyspywarestealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks