General

  • Target

    202409186568b9ffcb8c8d63bd8b066972d3798dpoetratsnatch

  • Size

    14.0MB

  • MD5

    6568b9ffcb8c8d63bd8b066972d3798d

  • SHA1

    5ea2b00be65494475b639c16fa8ab66590175a86

  • SHA256

    9a324052211fbf111e8ba4e3d71665a221f3c5a475524309bc705ee95310dc65

  • SHA512

    0ea1b1b39d110dbabe0e1adacb3eb1b467a333dd8b86ed6ad4ab8aef95478537a810ea3d4b5821579fa67eb2cf112308c1e16b9a744daaf184434ef205ea2186

  • SSDEEP

    196608:LSG4xZcgzl5TDH6KbJLFfI6OB/zIf8ryQ5S:LYxt5/H6KbhFfpOlzIfxA

Score
10/10

Malware Config

Extracted

Family

thunderkittystealer

C2

https://api.telegram.org/bot7396255266:AAGy7EZCzaG6ueQ7f4qXBPwmwf_1M_OCqDk/sendMessage?chat_id=6508120798

Signatures

  • Thunderkittystealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202409186568b9ffcb8c8d63bd8b066972d3798dpoetratsnatch
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections