General

  • Target

    1538f2496409067d29289d9223e22a39.zip

  • Size

    724KB

  • Sample

    240830-2b2jpszamh

  • MD5

    3dfbb4a963917c743aee616794917551

  • SHA1

    c476e9b5e07ca2a78a6902a8173b01d52aa8407f

  • SHA256

    28928ac9f1ecb003939abb73a2c4d98ecb32e42dd4351c83e4fc10344ede3a3f

  • SHA512

    70f647159c4bee154ce6bb70c74c1cff9e4aab42a58e0f5115d5f9c0828f183a9d4f692d24449cc8bb229491df90a5ebcbff0e23d04423b12a9820cfe17dc4e0

  • SSDEEP

    12288:IBKXNfT0iWFOur0hYvtv+kMLmQ1UvIUReY45mBjrFgjqJCwPkSUSpksBfsrC1/pv:IB60iWoFGlv+1L5+IURU5tWLPkxSpvBh

Malware Config

Targets

    • Target

      714b920e2e9691e98d269641f49a958a9324ed6bec404620c4fa2db5624a7e27

    • Size

      843KB

    • MD5

      1538f2496409067d29289d9223e22a39

    • SHA1

      a5b76c1277270fc2644399fe9ada46fcf7c20489

    • SHA256

      714b920e2e9691e98d269641f49a958a9324ed6bec404620c4fa2db5624a7e27

    • SHA512

      04b94808d1f79c526cb673b47f75064bffaa28b6b44ca2efc669fa43ddbc7091d51722a8781d6b29bee46eaec3567d1f80400678df3410d3a05bd828d90ad4d1

    • SSDEEP

      12288:lGWGDHK/4O4v9tIr8aVwDTadGRmNQ51038WcqhVTnvJkxmwH4E6:lGTX9tIr8gw/wPS638QhVN84

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks