General

  • Target

    JaffaCakes118_1538f2496409067d29289d9223e22a39

  • Size

    843KB

  • Sample

    241231-mm272swngz

  • MD5

    1538f2496409067d29289d9223e22a39

  • SHA1

    a5b76c1277270fc2644399fe9ada46fcf7c20489

  • SHA256

    714b920e2e9691e98d269641f49a958a9324ed6bec404620c4fa2db5624a7e27

  • SHA512

    04b94808d1f79c526cb673b47f75064bffaa28b6b44ca2efc669fa43ddbc7091d51722a8781d6b29bee46eaec3567d1f80400678df3410d3a05bd828d90ad4d1

  • SSDEEP

    12288:lGWGDHK/4O4v9tIr8aVwDTadGRmNQ51038WcqhVTnvJkxmwH4E6:lGTX9tIr8gw/wPS638QhVN84

Malware Config

Targets

    • Target

      JaffaCakes118_1538f2496409067d29289d9223e22a39

    • Size

      843KB

    • MD5

      1538f2496409067d29289d9223e22a39

    • SHA1

      a5b76c1277270fc2644399fe9ada46fcf7c20489

    • SHA256

      714b920e2e9691e98d269641f49a958a9324ed6bec404620c4fa2db5624a7e27

    • SHA512

      04b94808d1f79c526cb673b47f75064bffaa28b6b44ca2efc669fa43ddbc7091d51722a8781d6b29bee46eaec3567d1f80400678df3410d3a05bd828d90ad4d1

    • SSDEEP

      12288:lGWGDHK/4O4v9tIr8aVwDTadGRmNQ51038WcqhVTnvJkxmwH4E6:lGTX9tIr8gw/wPS638QhVN84

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks