Resubmissions

30/09/2024, 15:02

240930-sel4ra1fpj 10

29/09/2024, 21:06

240929-zx85kavckb 10

General

  • Target

    kwslzz.exe

  • Size

    7.7MB

  • MD5

    481a281d1e403edc9929ff763c8fbfad

  • SHA1

    5e021251fbc9a3e12c107f5b6a1c0b971ec481af

  • SHA256

    8e318c4108515273c7771e73ca814d09f4000f9508cc45b7afcb5f98b40aafec

  • SHA512

    a9787a7be82c4f07be66cfaad9fa8614d0a1100b1acd22fcdbfa22027321afcc5fb548b6ea6a82b40c782066ed2ffa4475cbabcd468e04c700d38e18c9d12346

  • SSDEEP

    98304:aN1FeFR8EAjPcPBEnlv5CbNelTmLOqHBwiXM2Ol2GhZ:nn8EAjXiHOqKUM242WZ

Malware Config

Extracted

Family

thunderkittyransomware

C2

https://discord.com/api/webhooks/1289254488690921604/T_8SdWKaS6HoADGM7JVaF6jcngj3AwNmj_uW_5n-JDG_BMkPSaslAw0RSFMU0AJAbScS

Signatures

  • Thunderkittyransomware family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • kwslzz.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections