General

  • Target

    JaffaCakes118_b303919a57b5635af5cd6bbf17642a7b

  • Size

    842KB

  • Sample

    250108-3mg5wa1lan

  • MD5

    b303919a57b5635af5cd6bbf17642a7b

  • SHA1

    406811b6e29c936f28805645f8d2510bb0e2ebc2

  • SHA256

    3087eb38d111c49d652a0a26cafdde80f3504f841e503788cb8001d1eb79d435

  • SHA512

    0bd599be708582271005e2f18c6d640dd00147471e2f65bee0d07e6866d01c71b0536883346614674e9858625f1a67b962832c2eb38a918cd0d6cd3edbcc91f7

  • SSDEEP

    24576:zq9FZgv6K89zwCgGofKP0fHxwa01vRrSNKFkXi:oFZgS9O3SPxa01vRrSNNXi

Malware Config

Targets

    • Target

      JaffaCakes118_b303919a57b5635af5cd6bbf17642a7b

    • Size

      842KB

    • MD5

      b303919a57b5635af5cd6bbf17642a7b

    • SHA1

      406811b6e29c936f28805645f8d2510bb0e2ebc2

    • SHA256

      3087eb38d111c49d652a0a26cafdde80f3504f841e503788cb8001d1eb79d435

    • SHA512

      0bd599be708582271005e2f18c6d640dd00147471e2f65bee0d07e6866d01c71b0536883346614674e9858625f1a67b962832c2eb38a918cd0d6cd3edbcc91f7

    • SSDEEP

      24576:zq9FZgv6K89zwCgGofKP0fHxwa01vRrSNKFkXi:oFZgS9O3SPxa01vRrSNNXi

    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks