General

  • Target

    https://github.com/Worm-x/XWorm-5.6-FULL-Source-Code?tab=readme-ov-file

  • Sample

    241230-3lbayatqbj

Malware Config

Targets

    • Target

      https://github.com/Worm-x/XWorm-5.6-FULL-Source-Code?tab=readme-ov-file

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks