Overview

overview

10

Static

static

3

3c147e4cad...18.exe

windows7-x64

10

3c147e4cad...18.exe

windows10-2004-x64

10

#/WotBru...ed.exe

windows7-x64

#/WotBru...ed.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c147e4cad850c360e9fba39d4471685_JaffaCakes118

  • Size

    1.7MB

  • Sample

    241012-z5e7fswdjl

  • MD5

    3c147e4cad850c360e9fba39d4471685

  • SHA1

    9e84e0ecf8c63f964b8b040197df8f70cb81f1dc

  • SHA256

    d4d1c5c9fddc6680f979f4f1e78812bfb13153ca2718dd210e775cc835386582

  • SHA512

    03f10b9fddea6e97a10b7ce88e2daccb0294843ddc0ea7cc6e2fe83cb6a90ee39d838cee7551c4cf94e924869bc7e9d203575ca9483774bb8228458e25d3fde9

  • SSDEEP

    49152:tiS1UQRIOFrzqV0zL3puF6e1PRKSIs9Mn5sJM2JAgxgly0:MS1UQRHFrk0361PRKS7xTJruv

Score
10/10
stormkittydiscoverystealer

Malware Config

Targets

    • Target

      3c147e4cad850c360e9fba39d4471685_JaffaCakes118

    • Size

      1.7MB

    • MD5

      3c147e4cad850c360e9fba39d4471685

    • SHA1

      9e84e0ecf8c63f964b8b040197df8f70cb81f1dc

    • SHA256

      d4d1c5c9fddc6680f979f4f1e78812bfb13153ca2718dd210e775cc835386582

    • SHA512

      03f10b9fddea6e97a10b7ce88e2daccb0294843ddc0ea7cc6e2fe83cb6a90ee39d838cee7551c4cf94e924869bc7e9d203575ca9483774bb8228458e25d3fde9

    • SSDEEP

      49152:tiS1UQRIOFrzqV0zL3puF6e1PRKSIs9Mn5sJM2JAgxgly0:MS1UQRHFrk0361PRKS7xTJruv

    Score
    10/10
    stormkittydiscoverystealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      #/WotBruteSBcracked_boxed.exe

    • Size

      3.9MB

    • MD5

      be079a3a510082fd2f1a482d81a960a5

    • SHA1

      60a87bf062da45678cf011dd093e8b80985fcad4

    • SHA256

      bf2a9b6812b8f2433178b23f61dea16ecbba93dedc52775cc652eaa6a26c365b

    • SHA512

      b9bb702e58523dc1fa3416855a12e0834a3b3b0b71fc95087420e6911797f8479605113512ed642d0158a6f53cee12bb03ac13e64a433b02e899c538d57d8427

    • SSDEEP

      49152:z+Ava+BP0Q0KzhJlhqo00d0vuZ01zIldeCKbu9kQLi8LqPUxj9Q5jjqtyuG5:z+Av10Qthnhqv0d0Wu1H8usxR

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks