General

  • Target

    rdp_stealer.exe

  • Size

    320KB

  • MD5

    aed949c2645ab1e4671d9cbb6306c063

  • SHA1

    a2cd06f61a2d220b81f62ca62ebe6df3246e6837

  • SHA256

    1f5d9a0d8947fe2761530a5e024fcb655b04cbd57bad826d45956153f74938cf

  • SHA512

    a23794c977667fb59d73ff9781d7262b1f02419bae3094717df0e5ff1ac194cd3e74d8badbd58899f5d03face7944becf7e517f3d82cd24b0f545e4a7b7ef3cd

  • SSDEEP

    6144:3m/Q1Q5Ng68j/svmHC40+XIzFUygWK0tWrcBOvx:3m/Q6P8j/svm1TXI5tZB

Score
10/10

Malware Config

Signatures

  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rdp_stealer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections