Overview

overview

10

Static

static

10

Build.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Build.bin

  • Size

    574KB

  • Sample

    250122-x48q9sslfj

  • MD5

    1749aee9312b4b8361adfef5f030661f

  • SHA1

    d09a1b15a479d1adf739ac0a8a0fcc496ba8b839

  • SHA256

    569eb8e183947d368b9a38c83b73f852e4ae2401fc82db4458cabf7b04bc17fe

  • SHA512

    7ea5b4c8050bce10579e14565003a89b43e03fb0bcfa3f3f10a83b28da0c2c43a703fb25dbe9e8645cf2717a82869f9b214cc6f86d253629260cd93702d43e73

  • SSDEEP

    6144:SHYyAMe5/Jmfmk/CSIL9wiSEpb5QaLkFh9YEfRJ5IcPVAEUOcK6LRPdehjcedqmg:SHYyA9wfkx8rvaB75HoY6R

Score
10/10
stormkittycollectiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Targets

    • Target

      Build.bin

    • Size

      574KB

    • MD5

      1749aee9312b4b8361adfef5f030661f

    • SHA1

      d09a1b15a479d1adf739ac0a8a0fcc496ba8b839

    • SHA256

      569eb8e183947d368b9a38c83b73f852e4ae2401fc82db4458cabf7b04bc17fe

    • SHA512

      7ea5b4c8050bce10579e14565003a89b43e03fb0bcfa3f3f10a83b28da0c2c43a703fb25dbe9e8645cf2717a82869f9b214cc6f86d253629260cd93702d43e73

    • SSDEEP

      6144:SHYyAMe5/Jmfmk/CSIL9wiSEpb5QaLkFh9YEfRJ5IcPVAEUOcK6LRPdehjcedqmg:SHYyA9wfkx8rvaB75HoY6R

    Score
    10/10
    stormkittycollectiondiscoverypersistenceprivilege_escalationspywarestealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks