General

  • Target

    build.exe

  • Size

    106KB

  • Sample

    250218-zd8ppazqw3

  • MD5

    7d86ce63fb857ca060c4fe1064c76e61

  • SHA1

    7ff1d6366e0545cf1b98a8410fb0abd19195e8dd

  • SHA256

    3ecfbaf4769c2db033505aed0c69fa8c0fda8dda9e343af7ccaf0d50457bd1e0

  • SHA512

    12f4292f4b6f337da19edbc5071d4e20599da1f7e07cb8ed06b950a7888251a9ec26a07e5d84c2aa935d5613b99de84bab679b43016c17939d353973d56f24a9

  • SSDEEP

    1536:U7YfZJRZk79wZn8nESiIkD2V37AUIuvQ7sG69bAdI4pxReUbpqp6bDQx:U+RZk7WZnc4YOWQ7sR9bGpxReUbpqD

Score
10/10

Malware Config

Targets

    • Target

      build.exe

    • Size

      106KB

    • MD5

      7d86ce63fb857ca060c4fe1064c76e61

    • SHA1

      7ff1d6366e0545cf1b98a8410fb0abd19195e8dd

    • SHA256

      3ecfbaf4769c2db033505aed0c69fa8c0fda8dda9e343af7ccaf0d50457bd1e0

    • SHA512

      12f4292f4b6f337da19edbc5071d4e20599da1f7e07cb8ed06b950a7888251a9ec26a07e5d84c2aa935d5613b99de84bab679b43016c17939d353973d56f24a9

    • SSDEEP

      1536:U7YfZJRZk79wZn8nESiIkD2V37AUIuvQ7sG69bAdI4pxReUbpqp6bDQx:U+RZk7WZnc4YOWQ7sR9bGpxReUbpqD

    Score
    10/10
    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks