Overview

overview

10

Static

static

3

2024-10-29...ch.exe

windows7-x64

10

2024-10-29...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-29_ecef591dcfda92121bdf2341f26b7406_snatch

  • Size

    2.1MB

  • Sample

    241029-dxjc9a1rd1

  • MD5

    ecef591dcfda92121bdf2341f26b7406

  • SHA1

    d3e55ad39adba6fe64f93eabb47fac56689536bc

  • SHA256

    8e572290f684ca38d9d649dea438a4c49d09e34ffa009ebcac0a1c83006ba136

  • SHA512

    18984a35d18680dcf6ec995ef20348a9b56d5911ac86c27ba332852c7116b334f2c9dc17291dcbbd3430528e649e0a5e22a1d92e8d51cc4043180761aa57a9c9

  • SSDEEP

    24576:qPFzAI1WiazZtMNR2Z3xqdKUg875gCjaXbTpQr2wA5LltBuXmfXuR0urK8dop7w7:d3x/bTjHZ6myK+EV1/h2rg6fr8ZD1

Score
10/10
stormkittydiscoveryspywarestealer

Malware Config

Targets

    • Target

      2024-10-29_ecef591dcfda92121bdf2341f26b7406_snatch

    • Size

      2.1MB

    • MD5

      ecef591dcfda92121bdf2341f26b7406

    • SHA1

      d3e55ad39adba6fe64f93eabb47fac56689536bc

    • SHA256

      8e572290f684ca38d9d649dea438a4c49d09e34ffa009ebcac0a1c83006ba136

    • SHA512

      18984a35d18680dcf6ec995ef20348a9b56d5911ac86c27ba332852c7116b334f2c9dc17291dcbbd3430528e649e0a5e22a1d92e8d51cc4043180761aa57a9c9

    • SSDEEP

      24576:qPFzAI1WiazZtMNR2Z3xqdKUg875gCjaXbTpQr2wA5LltBuXmfXuR0urK8dop7w7:d3x/bTjHZ6myK+EV1/h2rg6fr8ZD1

    Score
    10/10
    stormkittydiscoveryspywarestealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks