Resubmissions
03-02-2025 21:25
250203-z94evawjdj 1003-02-2025 21:24
250203-z89kgatnht 1003-02-2025 21:18
250203-z5ntlavram 10Analysis
-
max time kernel
37s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20240903-ja -
resource tags
-
submitted
03-02-2025 21:24
General
-
Target
StormKittyBuilder.exe
-
Size
17KB
-
MD5
e936b50ab766fb1fdfee7b01b3e4450a
-
SHA1
6b45ee8349b61604c4007e775e34c8ca45cae16b
-
SHA256
241b415fdfc53d5c0df654fa70cdf4ddb9df6d5cac6d42e465f521f4321ffdfb
-
SHA512
d3091a39156bad832f2d9faee22ddc0f3055dc2562f93a0a5ead04938b528c202a9658d02ef3f5b3f2c36f4508b970d815033cb32e18f7098629b105a1fe93b8
-
SSDEEP
192:haVr0QqQdHrlZ/28pGdQCOhNQuMMgKCg3t5p70fOVXIjXFEs55zh4+W/YbWnTrev:KDOghNEMcg9PZrs5HQ/YXc
Score
10/10
Malware Config
Signatures
-
StormKitty
StormKitty is an open source info stealer written in C#.
-
StormKitty payload 1 IoCs
-
Stormkitty family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\StormKittyBuilder.exe"C:\Users\Admin\AppData\Local\Temp\StormKittyBuilder.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
4KB
-
Filesize
9.9MB
-
Filesize
9.9MB