stormkitty | 4a10290ffe3d9a6fdc696e61e887b3bfd06a93c7541d830ed501e7f5f14c1390

Sharing

Copy URL Twitter E-mail

General

Target
d (4).zip
Size 61.4MB
Sample250204-c2sl2ssjhs
SHA256 4a10290ffe3d9a6fdc696e61e887b3bfd06a93c7541d830ed501e7f5f14c1390
MD5 d71b0b06ede6738a30c640df878e3e8a
SHA1 3a31236dee42c7f194fc238ff1d5408fc83850c2
SHA512 0aee13d11f6ea83c8c3ef9abafd940bbd8c45dd3497dc25e20ad62cf7deae1b0b888e9b821f5bc59cbe03b4c348d5c4436aba63bbb2dcef45351df36726dc577
SSDEEP 1572864:+XOrCTvb79qQ0/46WYBb+L4+9SIY17iXdrCTvb4+jQ0/47Gb+LObgUSiaG2Fq:+Sw9qJ/4mavSIY17ihz+jJ/4P99GR
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stormkitty agilenet

Malware Config

Targets

- Target
  XWorm/XWorm V5.1/MonoMod.ILHelpers.dll
- Size 6KB
- SHA256 1411e4858412ded195f0e65544a4ec8e8249118b76375050a35c076940826cd0
- MD5 6512e89e0cb92514ef24be43f0bf4500
- SHA1 a039c51f89656d9d5c584f063b2b675a9ff44b8e
- SHA512 9ffb2ff050cce82dbfbbb0e85ab5f976fcd81086b3d8695502c5221c23d14080f0e494a33e0092b4feb2eda12e2130a2f02df3125733c2f5ec31356e92dea00b
- SSDEEP 96:XC5172VL9HZNBrfq7LgcA6S8I2DqDXGnADX62WuauAuRt/0:q8xDfYLgcAMtAXG+rPVL/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral1 behavioral2
- Target
  XWorm/XWorm V5.1/MonoMod.Iced.dll
- Size 623KB
- SHA256 ef4a8f28226db390dd07de13afc01c8000e127c978ebf428a6637f39ac277033
- MD5 c24584c6b5bc57ac46727ab15e332c4a
- SHA1 dadd68f0fa45845fbc30fd0f8f54e8616cdd2d0b
- SHA512 aabc699eef08e3483049c7ceb48842deddc52284de7f6f72d56d6eccac3989cc373839aeac61f03e7b2af203744d579fd96a4eb911cfdd0461b151c41dc6771d
- SSDEEP 6144:Xw98C3SQzlfuStslPYAH+jUmLdf26bfDcj2511Qxu7F:q8CCYlfuGslPn+jvDTDcj251+xuR
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  XWorm/XWorm V5.1/MonoMod.Utils.dll
- Size 319KB
- SHA256 f22a4fa1e8b1b70286ecf07effb15d2184454fa88325ce4c0f31ffadb4bef50a
- MD5 79f1c4c312fdbb9258c2cdde3772271f
- SHA1 a143434883e4ef2c0190407602b030f5c4fdf96f
- SHA512 b28ed3c063ae3a15cd52e625a860bbb65f6cd38ccad458657a163cd927c74ebf498fb12f1e578e869bcea00c6cd3f47ede10866e34a48c133c5ac26b902ae5d9
- SSDEEP 6144:9gPf7SkKpBmBEKFutWL7dyywUQ1MWWavAsXjb:q7Svp8EtO49N
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  XWorm/XWorm V5.1/NAudio.dll
- Size 502KB
- SHA256 81b3f1dc3f1eac9762b8a292751a44b64b87d0d4c3982debfdd2621012186451
- MD5 3b87d1363a45ce9368e9baec32c69466
- SHA1 70a9f4df01d17060ec17df9528fca7026cc42935
- SHA512 1f07d3b041763b4bc31f6bd7b181deb8d34ff66ec666193932ffc460371adbcd4451483a99009b9b0b71f3864ed5c15c6c3b3777fabeb76f9918c726c35eb7d7
- SSDEEP 6144:96/i10SZtfzWctj98vZcE0wmLlaIZs5eku2sX2hrjAzvgmXa6W9FwsT9idwktQZG:9yrSKMJR9aGs55T1X9Fwspi2tGpmS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  XWorm/XWorm V5.1/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  XWorm/XWorm V5.1/Plugins/ActiveWindows.dll
- Size 14KB
- SHA256 32ac14f117af3a2973e0303d9da754888f23f6ff1730897f47b4f93d000ce75b
- MD5 a89dd74272c4221a3921b8f34918c086
- SHA1 101d496a80a3f32308c85328898747ba1f67bd18
- SHA512 026be43a25f3f1afeaa44420954db22e0841177ab02bece816f25a921e47dd0c1a049ca0d44c3fc0e57ee3a049dc7452611e5c85f0fea962529415220b2b3264
- SSDEEP 192:FpsFElxHxzCXorWcsvaUJwfdBuo1I5+3gqT8AO1tW9Yr6IW1GXZ3+eY7EDmSLOb:0FELRzbrUw/AodT8ptsY7XZ34ED8b
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  XWorm/XWorm V5.1/Plugins/All-In-One.dll
- Size 4.8MB
- SHA256 0dca9d815f8ea9aff7ca121071424914fa830c31369a93804a63e44078274f95
- MD5 e5cb40383701b4ebd098176c513936bc
- SHA1 ac263e44faaeffe28859dfb9c95aa969107d2a7a
- SHA512 cb161d3484fbb2247b907216e3d556a8545b0070dddbf294537d84b03b3e8503dae75f2cbce7e7cec03673085b46188ec108647e2c4e44627bb4ca4f489c6b03
- SSDEEP 98304:1l19F9QORkChiDC9OtH7c2iwGxIvPBOw0JefVfQ2a5cFd4KssODtd:l9FPRkC8C9OH7c2ilInz0kfVo26Wsd
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  XWorm/XWorm V5.1/Plugins/Chat.dll
- Size 18KB
- SHA256 3ef58d9a1d148af6c379b9ffe7d090268ed6a042ce640ea59803be8caf6cb1a3
- MD5 a60e5d4390b1f8c6f94b255481ad7f51
- SHA1 0fd7e0cea1ba811a31be8aaac803dd107e4caec4
- SHA512 6d3ed8afdabea1b43b6ecb2ed0beeff27f34123619ab688967fbe1f28971eea85612aba0baaad9bfe3c9b156d2b6c3f4f56ed4a08901b089f34cb103c440c11e
- SSDEEP 384:BUeRbCtl+SLFxdQ0C7sKmsfcrwTKvh6GIKoIefWUWmf9:s4SpxaoKmJr0pIefWXO
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  XWorm/XWorm V5.1/Plugins/Clipboard.dll
- Size 14KB
- SHA256 51c9a0c4c741d0a0439b7f7b0930325c1e43a0fa78fec21244ded9e3e2400299
- MD5 e2e2246f73a7ea4cf79e9cd5cafec405
- SHA1 d97595d61f49c86bdf3b63707af27d8dd7103afd
- SHA512 b09b1898799b3425fa3a1395977a68b19f193927a3a1db56d4302944373b635498fc7b34a60492dd78545c565c6765a282685fec332052591563298bd1972624
- SSDEEP 192:s+e2PZKYnw/LzXsJ0zzBa70OFXgNTer149iY6IW1mX/60VCCWk7RSLWMU:82ZE3sJ0ha70USTe5Wi2X/6SjMU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17 behavioral18
- Target
  XWorm/XWorm V5.1/Plugins/Cmstp-Bypass.dll
- Size 11KB
- SHA256 fa420fd3d1a5a2bb813ef8e6063480099f19091e8fa1b3389004c1ac559e806b
- MD5 cf15259e22b58a0dfd1156ab71cbd690
- SHA1 3614f4e469d28d6e65471099e2d45c8e28a7a49e
- SHA512 7302a424ed62ec20be85282ff545a4ca9e1aecfe20c45630b294c1ae72732465d8298537ee923d9e288ae0c48328e52ad8a1a503e549f8f8737fabe2e6e9ad38
- SSDEEP 192:KpXpS1QWlPkiqdE7FNNGGO9mWbpGkjgyaYcIW1vr/8TNU7aL7YiLsO08hdW5:Kp5IfL0mWbEkUyaYir/oNJL7KQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  XWorm/XWorm V5.1/Plugins/FileManager.dll
- Size 679KB
- SHA256 7e9a443f43bd92777ac7e4fca8f6b44e7a9912835dd022aaa68c6dd9c70ec7aa
- MD5 5a88ad1ebd121a9eb4a520cf97ca6fc8
- SHA1 72e88df92a996ec55ed7dc815fc208fae160e5ba
- SHA512 b07a55513e0be20efbecf583f0d22d2b6051ae7890af95dc65ff84b582f8c806aeff930d6295a68d6e6a8bf310e047990915c84e0f92dd2437a23ee2290776f7
- SSDEEP 12288:B9wCuLvFdA0uuBK69dN0RpNBgucQDdnGtNVcwlT:HOLvFdA0uuBK69D07NBrcQDdnGtNV
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  XWorm/XWorm V5.1/Plugins/FileSeacher.dll
- Size 478KB
- SHA256 c1bb7f89e10f3e4214b8213e728e6bf5bee8d5dfe66aa304f1396fe6afa2f933
- MD5 ddd4ae137e023e293477e0f52a982ee4
- SHA1 2decefb69bcfb8306c519ff98c0277bbca8fd40f
- SHA512 a1ec9d3ebfe4dae3ba7b2e744cfbe546bfabc15795ba9c3c9624da2b7c4564244c3570d202964137ac1239e038d2f999976dfc0ad359808a285e661e6946dfc0
- SSDEEP 6144:+88L5lWTUVRTw/l97teGtSV41QJDsTDDh0Yhe6dwxLV/tuhgpn5vWRBI+WR:3zTUVRTw1lS4Ys50ie6Cf4gpys
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  XWorm/XWorm V5.1/Plugins/HRDP.dll
- Size 1.7MB
- SHA256 06112658d3f250bdc136fbfce07c9b93772aa3aadbde9893a34e9f5962121445
- MD5 5dd14343d120def51a8504a35c83f5b9
- SHA1 1458b2629901200bf4b6fe6b6258ebcca083404b
- SHA512 7230dd19eeece4aba9c5b97cfa273d6f9957c9b59ae2e60bb0811b4ae0fc82597fe64039c1ea7dae8bf9b8d81732022b96153cd9ecd8ae5ff2359b2ff1f8722b
- SSDEEP 24576:qdKrKxoVT2iXc+IZ++6WiaTAsN/3ebTvK+63CWH8iA/iD2hgPjcC8SVdKumYr7:qdLHZ5pdqYH8ia6GcKuR7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  XWorm/XWorm V5.1/Plugins/HVNC.dll
- Size 58KB
- SHA256 77edb581f60e4e04ff0c997c28b57f6fa93416e7a87d0f0daaae302866b78d35
- MD5 f385b6b4bb2600a95d152564151efa5f
- SHA1 b70ba4324df9d39ec686e38eb135a515bc4499c8
- SHA512 af55e3eb48b6142ae978999226ecfe996ddd6158e220a2e0b0e0c1f312d29486640f62e827d75bf1352374b1d2a3dea7bb9141380f46c653e2ced96ea5d3a561
- SSDEEP 1536:DK1+hYeRT6z12BWR7fE3XZll/72NGaM2fDP:o+hYekz12BWR70Ckab7P
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  XWorm/XWorm V5.1/Plugins/HVNCMemory.dll
- Size 39KB
- SHA256 f0a6502e7fe2a9d4faf5a949c16e1504855a0827e502536aa84f5d6420acc78b
- MD5 54c2cf58d766d76041b2faae9a9731c6
- SHA1 40a26c8939ec691ec88c6d4daaedf2ad8b2f5180
- SHA512 b4097a7ed2de31d058c83f5731fb044a2883e20dbe3eb1f304c5b208891afd4e7efc1621d8a87c4eb30d898b4bad372bd3cea17105cf5c07f371141fe7704d5f
- SSDEEP 768:WG3XmmD4SlQ0gfI1OL/6zA+d8HK9eQzy8UmhbJ:WgXbXi0pOL/yN1deA
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  XWorm/XWorm V5.1/Plugins/Informations.dll
- Size 22KB
- SHA256 ad562a4c86ae13abc80a6cf22e88f50d4dede6d2ab3407aee849de3364d97dcf
- MD5 5077fb4a8a1589495a5dd47a79156386
- SHA1 bbb9cc2a9296826558bee9a69ba86be7c8462a01
- SHA512 253784f927c217152abd1c43203f7b3930066a36f2fd39919020e0088419ac763faa3dd9ba42d6660924eee06b8c796cb25f39eec637847b60524a56c570fc82
- SSDEEP 384:O4svJAz5thUNHcxxypeGQ/0n3TmyxhxJNSLSg4TjjoZ:O4suz/LypeGQEjfNSuM
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32