Overview

overview

10

Static

static

3

9888ce35d9...18.exe

windows7-x64

3

9888ce35d9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9888ce35d905f7a831dd0ff96757c45c6bd7adea987720b05141f3522c480b18

  • Size

    4.2MB

  • Sample

    241231-nwyrna1mck

  • MD5

    781da1c06e074c6dfbb0c6b797df9eb7

  • SHA1

    38e79b6ea79d430c6858a976afb0bb60a5aa3320

  • SHA256

    9888ce35d905f7a831dd0ff96757c45c6bd7adea987720b05141f3522c480b18

  • SHA512

    69df833452ea77393c54ffa449dc625720ac0fb449a3ee1da20d867c208555edf5845076ea00dc5a6d05254cf87fdd39fed12e33d3c6f726ba2e42060a9c2b3e

  • SSDEEP

    49152:PAD5nl+y9ozOA1IXEA3SaVXjHZ/35XqFluh5VC5LQ/EqRBL7akCZYXR:ID5lPSyVJrj5/3Fr7akC

Score
10/10
asyncratstormkittydiscoverypersistenceratstealer

Malware Config

Targets

    • Target

      9888ce35d905f7a831dd0ff96757c45c6bd7adea987720b05141f3522c480b18

    • Size

      4.2MB

    • MD5

      781da1c06e074c6dfbb0c6b797df9eb7

    • SHA1

      38e79b6ea79d430c6858a976afb0bb60a5aa3320

    • SHA256

      9888ce35d905f7a831dd0ff96757c45c6bd7adea987720b05141f3522c480b18

    • SHA512

      69df833452ea77393c54ffa449dc625720ac0fb449a3ee1da20d867c208555edf5845076ea00dc5a6d05254cf87fdd39fed12e33d3c6f726ba2e42060a9c2b3e

    • SSDEEP

      49152:PAD5nl+y9ozOA1IXEA3SaVXjHZ/35XqFluh5VC5LQ/EqRBL7akCZYXR:ID5lPSyVJrj5/3Fr7akC

    Score
    10/10
    discoveryasyncratstormkittypersistenceratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Async RAT payload

      rat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks