Overview

overview

10

Static

static

10

tvsqyp.exe

windows7-x64

10

tvsqyp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tvsqyp.exe

  • Size

    3.0MB

  • Sample

    250106-k6yymavner

  • MD5

    45a042ca2841164a8a19f1dab81e1fa9

  • SHA1

    80326c8b27d3558b453123317462b2e79bf4c7a3

  • SHA256

    c5cf193de64de2b708b047ed8308ab4f6ecfb40a3f13876cd182cabab04eb854

  • SHA512

    36d57da9a3b11d3e2b19ce5b2db93cbfec4e4f933b85a3b497c947566ab05188783f14e7bc9ea5fb1122c9f62c64b95217df76c474b192bd1704413e7f00d2c7

  • SSDEEP

    49152:0GVLgqHU3mdatQdsgUBX3B3kNC3H6vUZtr/N2e:0GFQ3mdatQSo

Score
10/10
asyncratstormkittydiscoveryratstealer

Malware Config

Targets

    • Target

      tvsqyp.exe

    • Size

      3.0MB

    • MD5

      45a042ca2841164a8a19f1dab81e1fa9

    • SHA1

      80326c8b27d3558b453123317462b2e79bf4c7a3

    • SHA256

      c5cf193de64de2b708b047ed8308ab4f6ecfb40a3f13876cd182cabab04eb854

    • SHA512

      36d57da9a3b11d3e2b19ce5b2db93cbfec4e4f933b85a3b497c947566ab05188783f14e7bc9ea5fb1122c9f62c64b95217df76c474b192bd1704413e7f00d2c7

    • SSDEEP

      49152:0GVLgqHU3mdatQdsgUBX3B3kNC3H6vUZtr/N2e:0GFQ3mdatQSo

    Score
    10/10
    asyncratstormkittydiscoveryratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks