stormkitty | 71c2d4c56eb76e1442548504cfc35af357ddaf95968e6a2f9ac60d804a40163c

General

Target

71c2d4c56eb76e1442548504cfc35af357ddaf95968e6a2f9ac60d804a40163c
Size

1.1MB
MD5

e10d4a9fb3f6cb40b721a883f5b21333
SHA1

2593e6d56fe6c76216c026eaf44aa1fdb61137ff
SHA256

71c2d4c56eb76e1442548504cfc35af357ddaf95968e6a2f9ac60d804a40163c
SHA512

321137c35b903991c1653af0bf704dbe9c7ded42b941260a7a3222b0407d5dd91c593fca18ab599347fbcd985a29aafef45d97990c170c1f1dca4f04d59c22d0
SSDEEP

24576:5nsJ39LyjbJkQFMhmC+6GD9c0P8j/svqA:5nsHyjtk2MYC5GDzP8j/Mq

Score

10^/10

stormkitty xred

Family

xred

C2

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

StormKitty payload 1 IoCs

resource	yara_rule
sample	family_stormkitty

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c2d4c56eb76e1442548504cfc35af357ddaf95968e6a2f9ac60d804a40163c