Overview

overview

10

Static

static

1

9eeb1ff959...e5.exe

windows7-x64

7

9eeb1ff959...e5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9eeb1ff9590f0d56965dd0c3be237be5.exe

  • Size

    3.1MB

  • Sample

    250201-jvevyawqeq

  • MD5

    9eeb1ff9590f0d56965dd0c3be237be5

  • SHA1

    64155d81fe03af2725dca920e7aac156b6fa12e6

  • SHA256

    5f9656c4d140f6ee84da24a9241e4c7e8db9b98ab32e9d860731dfbab2cf7477

  • SHA512

    01c695d0ce60fb21fd32b90e232bcc51424554497e2ccf39ca5f3f0323a3707d15d82681c00daa45919dc7eed46e38c68332609899f12101342f99dc66c998e4

  • SSDEEP

    49152:9qpkFI/uZ8ysZz87LsraENPGo+K79OAl9WdpJhz22miNAel3ZCTfZp:BmS8C879OAl9QV20AeGTX

Score
10/10
asyncratstormkittyvenomratdiscoveryratstealer

Malware Config

Targets

    • Target

      9eeb1ff9590f0d56965dd0c3be237be5.exe

    • Size

      3.1MB

    • MD5

      9eeb1ff9590f0d56965dd0c3be237be5

    • SHA1

      64155d81fe03af2725dca920e7aac156b6fa12e6

    • SHA256

      5f9656c4d140f6ee84da24a9241e4c7e8db9b98ab32e9d860731dfbab2cf7477

    • SHA512

      01c695d0ce60fb21fd32b90e232bcc51424554497e2ccf39ca5f3f0323a3707d15d82681c00daa45919dc7eed46e38c68332609899f12101342f99dc66c998e4

    • SSDEEP

      49152:9qpkFI/uZ8ysZz87LsraENPGo+K79OAl9WdpJhz22miNAel3ZCTfZp:BmS8C879OAl9QV20AeGTX

    Score
    10/10
    discoveryasyncratstormkittyvenomratratstealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • Asyncrat family

      asyncrat

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • VenomRAT

      Detects VenomRAT.

      rat

    • Venomrat family

      venomrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks