General

  • Target

    StormKitty.exe

  • Size

    113KB

  • Sample

    241019-vb858awerf

  • MD5

    bc830e4fc1b97a0a8686c5a42c34c6f9

  • SHA1

    220eef99375485f20b5a9a85fa23b7ee5d8e3329

  • SHA256

    399fcc26b309dfabe8985f6ef3d827a22e9efc6fcdcb21f61a9d601043f17c5b

  • SHA512

    51f560595a98b7551737ba349ad750975b99c9777ad7150031b946721afe0509a0b2f90609063e802b57fcd257f5668cb7f259c4dbbf381b0628ab23b71ad58f

  • SSDEEP

    1536:A/9b1J5I2LKlgGoqQ8RcTz5x2ci52g9usGA9bAF12zoEXiLzU6pdjy1+Z:o9pJ5I2FpocvMvusN9bA+iLzU6pdUi

Malware Config

Targets

    • Target

      StormKitty.exe

    • Size

      113KB

    • MD5

      bc830e4fc1b97a0a8686c5a42c34c6f9

    • SHA1

      220eef99375485f20b5a9a85fa23b7ee5d8e3329

    • SHA256

      399fcc26b309dfabe8985f6ef3d827a22e9efc6fcdcb21f61a9d601043f17c5b

    • SHA512

      51f560595a98b7551737ba349ad750975b99c9777ad7150031b946721afe0509a0b2f90609063e802b57fcd257f5668cb7f259c4dbbf381b0628ab23b71ad58f

    • SSDEEP

      1536:A/9b1J5I2LKlgGoqQ8RcTz5x2ci52g9usGA9bAF12zoEXiLzU6pdjy1+Z:o9pJ5I2FpocvMvusN9bA+iLzU6pdUi

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks