General

  • Target

    StormKittyBuild.exe

  • Size

    366KB

  • Sample

    240512-m25xgsfb26

  • MD5

    1afedad3b668e4bd8faa5f2d7abda95b

  • SHA1

    99bca8ccac242858184191f64f5da874722442f8

  • SHA256

    3106f3defd63051dd4652582b58c1f030c102f5f6e49a10e3e008df6e7a27fc1

  • SHA512

    2b9eb2ed122e20e82148c2243d25376cb44008d91a2bda41922380955a532fe827503b527d39b3aa96d8a0cd85cfdc942c23203b87568d292313c203c499c0c0

  • SSDEEP

    6144:YxAcUJjuAxKzHlnoWINqzbv2Q9rUsbf4l35PKMxQpHUO6dUIY8u4eU:djuzBoD1Erf4lpi0O6yR8uK

Score
10/10

Malware Config

Targets

    • Target

      StormKittyBuild.exe

    • Size

      366KB

    • MD5

      1afedad3b668e4bd8faa5f2d7abda95b

    • SHA1

      99bca8ccac242858184191f64f5da874722442f8

    • SHA256

      3106f3defd63051dd4652582b58c1f030c102f5f6e49a10e3e008df6e7a27fc1

    • SHA512

      2b9eb2ed122e20e82148c2243d25376cb44008d91a2bda41922380955a532fe827503b527d39b3aa96d8a0cd85cfdc942c23203b87568d292313c203c499c0c0

    • SSDEEP

      6144:YxAcUJjuAxKzHlnoWINqzbv2Q9rUsbf4l35PKMxQpHUO6dUIY8u4eU:djuzBoD1Erf4lpi0O6yR8uK

    Score
    10/10
    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v13

Tasks