Resubmissions

18-02-2025 20:39

250218-zfgnzsyma1 10

Analysis

  • max time kernel
    437s
  • max time network
    438s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250217-en
  • resource tags

    arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    18-02-2025 20:39

General

  • Target

    builder - Copy/builder/StormKittyBuilder.exe

  • Size

    17KB

  • MD5

    e936b50ab766fb1fdfee7b01b3e4450a

  • SHA1

    6b45ee8349b61604c4007e775e34c8ca45cae16b

  • SHA256

    241b415fdfc53d5c0df654fa70cdf4ddb9df6d5cac6d42e465f521f4321ffdfb

  • SHA512

    d3091a39156bad832f2d9faee22ddc0f3055dc2562f93a0a5ead04938b528c202a9658d02ef3f5b3f2c36f4508b970d815033cb32e18f7098629b105a1fe93b8

  • SSDEEP

    192:haVr0QqQdHrlZ/28pGdQCOhNQuMMgKCg3t5p70fOVXIjXFEs55zh4+W/YbWnTrev:KDOghNEMcg9PZrs5HQ/YXc

Score
10/10

Malware Config

Signatures

  • StormKitty

    StormKitty is an open source info stealer written in C#.

  • StormKitty payload 1 IoCs
  • Stormkitty family

Processes

  • C:\Users\Admin\AppData\Local\Temp\builder - Copy\builder\StormKittyBuilder.exe
    "C:\Users\Admin\AppData\Local\Temp\builder - Copy\builder\StormKittyBuilder.exe"
    1⤵
      PID:1040

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1040-0-0x00007FFB26A93000-0x00007FFB26A95000-memory.dmp

      Filesize

      8KB

    • memory/1040-1-0x000001DA0A520000-0x000001DA0A528000-memory.dmp

      Filesize

      32KB