General

  • Target

    asd.exe

  • Size

    367KB

  • Sample

    240626-nr9y5ashpd

  • MD5

    c4e267614ab79408fba6722526059b1f

  • SHA1

    3d845013a78228c166ddf4dcac4bfa5c6287ef27

  • SHA256

    6a2760539d3854cb625c1944d38db86bad833e25d7aa5ae737c706aa6902d46c

  • SHA512

    91e3526fd70a8064586bafbb1a0844fa669d82ca7b35108bb95fea2b72552f200b788c29fb494a73087b19285c8aeb4fb9329f364ba604a4f2549926e7bfeebc

  • SSDEEP

    6144:j1E0LPFWW0LMkUSJHZ+wU153PDDdoxcarMx8t49QZ5RWJQbCS7tulN:5Ek6okUq+zPGJrMx6rRVGS6

Score
10/10

Malware Config

Targets

    • Target

      asd.exe

    • Size

      367KB

    • MD5

      c4e267614ab79408fba6722526059b1f

    • SHA1

      3d845013a78228c166ddf4dcac4bfa5c6287ef27

    • SHA256

      6a2760539d3854cb625c1944d38db86bad833e25d7aa5ae737c706aa6902d46c

    • SHA512

      91e3526fd70a8064586bafbb1a0844fa669d82ca7b35108bb95fea2b72552f200b788c29fb494a73087b19285c8aeb4fb9329f364ba604a4f2549926e7bfeebc

    • SSDEEP

      6144:j1E0LPFWW0LMkUSJHZ+wU153PDDdoxcarMx8t49QZ5RWJQbCS7tulN:5Ek6okUq+zPGJrMx6rRVGS6

    Score
    10/10
    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks