Overview

overview

10

Static

static

1

33a49b5070...6a.exe

windows7-x64

10

33a49b5070...6a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33a49b5070e2ce6c02ac79cb8a44239de9bf29c27f481a522d23aaadd1f1ad6a.exe

  • Size

    1.8MB

  • Sample

    241107-rplqaswnbr

  • MD5

    7cbe8e596a9accbaedfda1eb0a79a633

  • SHA1

    0d157211f273f9d2094b265ffb950ea37d42751d

  • SHA256

    33a49b5070e2ce6c02ac79cb8a44239de9bf29c27f481a522d23aaadd1f1ad6a

  • SHA512

    686b16356ef6ad29ba69dc76e1fdaf7635d00a7929fd12e5296b1a2810a91c2574a51e100c6d860e76bf9c0da3aa1c54896e400e9d12289e9ab6e5830d8906f2

  • SSDEEP

    24576:T3whrR4aDljHMNRIGxBfBE88f1hOry2pMpDqXdDb/yhAFrLhbzWemNgNrz4yfy/4:nHfSypFtLy/p1c0yAeZD10k

Score
10/10
stormkittydiscoveryspywarestealer

Malware Config

Targets

    • Target

      33a49b5070e2ce6c02ac79cb8a44239de9bf29c27f481a522d23aaadd1f1ad6a.exe

    • Size

      1.8MB

    • MD5

      7cbe8e596a9accbaedfda1eb0a79a633

    • SHA1

      0d157211f273f9d2094b265ffb950ea37d42751d

    • SHA256

      33a49b5070e2ce6c02ac79cb8a44239de9bf29c27f481a522d23aaadd1f1ad6a

    • SHA512

      686b16356ef6ad29ba69dc76e1fdaf7635d00a7929fd12e5296b1a2810a91c2574a51e100c6d860e76bf9c0da3aa1c54896e400e9d12289e9ab6e5830d8906f2

    • SSDEEP

      24576:T3whrR4aDljHMNRIGxBfBE88f1hOry2pMpDqXdDb/yhAFrLhbzWemNgNrz4yfy/4:nHfSypFtLy/p1c0yAeZD10k

    Score
    10/10
    stormkittydiscoveryspywarestealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks