General

  • Target

    build.exe

  • Size

    106KB

  • Sample

    250215-y49h8ssnaq

  • MD5

    de2f7d36c579a2090f6dba41f338f443

  • SHA1

    7de7be2dbbf226b16e6c5ee343f73e39d2b69a03

  • SHA256

    2c0bd088d36a2726598222dd33d5be4a7100ec967f35493f32e9bb50fc3e2f19

  • SHA512

    07307b18b1356a3118e86c32b98614c7aabb38c9ea83cce5b2546348b576c7464b2264866b86f076e85aa840f58c7bada3b46a581325322d2629720c85f159b6

  • SSDEEP

    1536:U7YfZJRZk79wZn8nESiIkD2V37AUIuvQ7sG69bAdI4pxReUbpDp6bDQx:U+RZk7WZnc4YOWQ7sR9bGpxReUbpDD

Score
10/10

Malware Config

Targets

    • Target

      build.exe

    • Size

      106KB

    • MD5

      de2f7d36c579a2090f6dba41f338f443

    • SHA1

      7de7be2dbbf226b16e6c5ee343f73e39d2b69a03

    • SHA256

      2c0bd088d36a2726598222dd33d5be4a7100ec967f35493f32e9bb50fc3e2f19

    • SHA512

      07307b18b1356a3118e86c32b98614c7aabb38c9ea83cce5b2546348b576c7464b2264866b86f076e85aa840f58c7bada3b46a581325322d2629720c85f159b6

    • SSDEEP

      1536:U7YfZJRZk79wZn8nESiIkD2V37AUIuvQ7sG69bAdI4pxReUbpDp6bDQx:U+RZk7WZnc4YOWQ7sR9bGpxReUbpDD

    Score
    10/10
    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks