Resubmissions

30-09-2024 15:02

240930-selg8a1fnn 10

30-09-2024 15:02

240930-sek7fs1fnm 10

29-09-2024 10:50

240929-mw8fes1cmp 10

28-09-2024 07:48

240928-jm698avaqn 10

General

  • Target

    k.exe

  • Size

    7.7MB

  • MD5

    a652ce5220cd49b6f763768dfa5f2a31

  • SHA1

    8b34c4ec496f910e2c70747ec73dad366a39006a

  • SHA256

    18e1937edc999cd87fa77cf26ac15b01421c4bf057ee5e0d8a659690f0db1964

  • SHA512

    62108c8f26fc7a8f3992bf3ee3957125fb806afe7dd54e5e3dce3bb58be808d1c7702c8aae0c62a90efc61777c9b0e24232166c96766765a8f70059d7b1e5b4f

  • SSDEEP

    98304:bwuFB5I0/A/636tEWlv5ZbNelTmLOqHBwiXM2Ol2GhZ:rW0/A/kIHOqKUM242WZ

Malware Config

Extracted

Family

thunderkittyransomware

C2

https://discord.com/api/webhooks/1289254488690921604/T_8SdWKaS6HoADGM7JVaF6jcngj3AwNmj_uW_5n-JDG_BMkPSaslAw0RSFMU0AJAbScS

Signatures

  • Thunderkittyransomware family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • k.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections