General

  • Target

    skeet (1234).zip

  • Size

    4.1MB

  • MD5

    3479ced9a8a15de0712a7f5bdc2f82f1

  • SHA1

    381b2f269191c65d801f33e98c4afdbd7523fe7f

  • SHA256

    bde17c0301047fac8609321d071edb5d857c68cc9d044ee01f6fa96990bd6e06

  • SHA512

    cccb183e9bfa6e017cd8a67125f6c49daf1d203f5f687ee36bc000fe0d240ab8b94129c48d3c708cecdaa10279e2ae5d247e93d5aadfc8c65ece18ea3923b0d0

  • SSDEEP

    98304:wjpB+Z+4P6th1sNl/kbJE2LhIzU5fUZoNQik4I:8rh6T/eJE2LhIAcx4I

Score
10/10

Malware Config

Extracted

Family

thunderkittystealer

C2

https://api.telegram.org/bot5521728363:AAEyeNcSOq8nab7CC91r_S3JELAEQsGbRlg/sendMessage?chat_id=1693007947

Signatures

  • Thunderkittystealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • skeet (1234).zip
    .zip

    Password: 1234

  • skeet.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections