Overview

overview

10

Static

static

10

ersyb.exe

windows7-x64

10

ersyb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ersyb.exe

  • Size

    3.0MB

  • Sample

    250102-wtqx2atlcm

  • MD5

    5d19a21c61d16d22619b846816a0e270

  • SHA1

    8aba1f6780ec5a1e389a193821f727b9e8ddb710

  • SHA256

    e0cc614e2c756bfe9eb3773daa8d6c0ac66a2902826f5ccbd94113e3ff69e3db

  • SHA512

    1a6f7daf3778f2b095092187d2d9540d27320100f0dbac8d29e48b34a1f929d1eb928344a0046ad3952825e1f9006a72f9821a6509dc54a392976b3b0358b580

  • SSDEEP

    49152:0GVLgqHU3mdatQdsgUBX3B3kNC3H6vUZ7r/N2e:0GFQ3mdatQSm

Score
10/10
asyncratstormkittydiscoveryratstealer

Malware Config

Targets

    • Target

      ersyb.exe

    • Size

      3.0MB

    • MD5

      5d19a21c61d16d22619b846816a0e270

    • SHA1

      8aba1f6780ec5a1e389a193821f727b9e8ddb710

    • SHA256

      e0cc614e2c756bfe9eb3773daa8d6c0ac66a2902826f5ccbd94113e3ff69e3db

    • SHA512

      1a6f7daf3778f2b095092187d2d9540d27320100f0dbac8d29e48b34a1f929d1eb928344a0046ad3952825e1f9006a72f9821a6509dc54a392976b3b0358b580

    • SSDEEP

      49152:0GVLgqHU3mdatQdsgUBX3B3kNC3H6vUZ7r/N2e:0GFQ3mdatQSm

    Score
    10/10
    asyncratstormkittydiscoveryratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks