Overview

overview

10

Static

static

3

fb7b07bca2...4N.exe

windows7-x64

10

fb7b07bca2...4N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb7b07bca2b99765cef91c503b85c68dd8d9ef306ade03882dbb67643be72b04N.exe

  • Size

    35KB

  • Sample

    250109-fck3fs1ner

  • MD5

    83f2a3d7087d8db71d9aec9dc64c5d30

  • SHA1

    41980bc821013bb198358dd2362380027967b6f9

  • SHA256

    fb7b07bca2b99765cef91c503b85c68dd8d9ef306ade03882dbb67643be72b04

  • SHA512

    6a9c3883d487d8c09c84e4920e4a1f828c58afa521a7477010b3a7780817d3fc1e7f18ac526a212a536d673d5a60f841f75d30f9a776303bdebf5b191ec19a81

  • SSDEEP

    768:eeBy5oxQY0QDvZtt+cty5ZpyZngfNO+M4aSSc:ew4oxZjz0NkgfNO+MGT

Score
10/10
asyncratstormkittyvenomratdiscoveryratstealer

Malware Config

Targets

    • Target

      fb7b07bca2b99765cef91c503b85c68dd8d9ef306ade03882dbb67643be72b04N.exe

    • Size

      35KB

    • MD5

      83f2a3d7087d8db71d9aec9dc64c5d30

    • SHA1

      41980bc821013bb198358dd2362380027967b6f9

    • SHA256

      fb7b07bca2b99765cef91c503b85c68dd8d9ef306ade03882dbb67643be72b04

    • SHA512

      6a9c3883d487d8c09c84e4920e4a1f828c58afa521a7477010b3a7780817d3fc1e7f18ac526a212a536d673d5a60f841f75d30f9a776303bdebf5b191ec19a81

    • SSDEEP

      768:eeBy5oxQY0QDvZtt+cty5ZpyZngfNO+M4aSSc:ew4oxZjz0NkgfNO+MGT

    Score
    10/10
    asyncratstormkittyvenomratdiscoveryratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • VenomRAT

      Detects VenomRAT.

      rat

    • Venomrat family

      venomrat

    • Downloads MZ/PE file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks