Overview

overview

10

Static

static

10

2401419d18...b8.exe

windows7-x64

10

2401419d18...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2401419d189d439cdbd5a3cc97d6afaa77570e866862f7b213c6541e1f48b5b8

  • Size

    3.0MB

  • Sample

    250115-n8aklaska1

  • MD5

    595231af8783e25f2ff3d8d6344c2e8f

  • SHA1

    d1ecae98510b4136c256b1ec9c7bca62173e2f57

  • SHA256

    2401419d189d439cdbd5a3cc97d6afaa77570e866862f7b213c6541e1f48b5b8

  • SHA512

    ed1fa754bc890441d0e2107a1609a39e1af228a38c2bfad4da2219931c468664d4cc7dc1ca155c272bfc2a20c1146f77d6d52220e9eaaff22e1ae357b8f84d53

  • SSDEEP

    49152:0GVLgqHU3mdatQdsgUBX3B3kNC3H6vUZkr/N2e:0GFQ3mdatQSx

Score
10/10
asyncratstormkittydiscoveryratstealer

Malware Config

Targets

    • Target

      2401419d189d439cdbd5a3cc97d6afaa77570e866862f7b213c6541e1f48b5b8

    • Size

      3.0MB

    • MD5

      595231af8783e25f2ff3d8d6344c2e8f

    • SHA1

      d1ecae98510b4136c256b1ec9c7bca62173e2f57

    • SHA256

      2401419d189d439cdbd5a3cc97d6afaa77570e866862f7b213c6541e1f48b5b8

    • SHA512

      ed1fa754bc890441d0e2107a1609a39e1af228a38c2bfad4da2219931c468664d4cc7dc1ca155c272bfc2a20c1146f77d6d52220e9eaaff22e1ae357b8f84d53

    • SSDEEP

      49152:0GVLgqHU3mdatQdsgUBX3B3kNC3H6vUZkr/N2e:0GFQ3mdatQSx

    Score
    10/10
    asyncratstormkittydiscoveryratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks