Overview

overview

10

Static

static

10

cd78403a8e...fN.exe

windows7-x64

10

cd78403a8e...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd78403a8eba164154f93b0a5f89c168728af5827dfbfacfa2cc0d7ab06f94efN.exe

  • Size

    1.1MB

  • Sample

    250102-j128esvpcp

  • MD5

    baa9e965a45f11afea37db79c1c7f2b0

  • SHA1

    32f30ff260ddb11d6c5c04bcdb40f253663837f3

  • SHA256

    cd78403a8eba164154f93b0a5f89c168728af5827dfbfacfa2cc0d7ab06f94ef

  • SHA512

    0fabf43228c82d1b00a0b27384f556d0e3917fa1a015685bcd49e89139e98f85ba6b52ac655c468a13768caca71b6b9da03718cf63950152b2bb2ad8f8d30e68

  • SSDEEP

    24576:CUSNXaV9x4IUgs36BUI2So5+jnzFoCaGApu8:C90T+Sk6BU7HIFo7G98

Score
10/10
stormkittydiscoveryspywarestealer

Malware Config

Targets

    • Target

      cd78403a8eba164154f93b0a5f89c168728af5827dfbfacfa2cc0d7ab06f94efN.exe

    • Size

      1.1MB

    • MD5

      baa9e965a45f11afea37db79c1c7f2b0

    • SHA1

      32f30ff260ddb11d6c5c04bcdb40f253663837f3

    • SHA256

      cd78403a8eba164154f93b0a5f89c168728af5827dfbfacfa2cc0d7ab06f94ef

    • SHA512

      0fabf43228c82d1b00a0b27384f556d0e3917fa1a015685bcd49e89139e98f85ba6b52ac655c468a13768caca71b6b9da03718cf63950152b2bb2ad8f8d30e68

    • SSDEEP

      24576:CUSNXaV9x4IUgs36BUI2So5+jnzFoCaGApu8:C90T+Sk6BU7HIFo7G98

    Score
    10/10
    stormkittydiscoveryspywarestealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks