Overview
overview
10Static
static
10builder - ...db.dll
windows7-x64
1builder - ...db.dll
windows10-2004-x64
1builder - ...db.dll
windows7-x64
1builder - ...db.dll
windows10-2004-x64
1builder - ...ks.dll
windows7-x64
1builder - ...ks.dll
windows10-2004-x64
1builder - ...il.dll
windows7-x64
1builder - ...il.dll
windows10-2004-x64
1builder - ...er.exe
windows7-x64
10builder - ...er.exe
windows10-2004-x64
10builder - ...ld.exe
windows7-x64
10builder - ...ld.exe
windows10-2004-x64
10builder - ...ub.exe
windows7-x64
10builder - ...ub.exe
windows10-2004-x64
10Analysis
-
max time kernel
73s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
18-02-2025 20:55
Behavioral task
behavioral1
Sample
builder - Copy/builder/Mono.Cecil.Mdb.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
builder - Copy/builder/Mono.Cecil.Mdb.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral3
Sample
builder - Copy/builder/Mono.Cecil.Pdb.dll
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
builder - Copy/builder/Mono.Cecil.Pdb.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral5
Sample
builder - Copy/builder/Mono.Cecil.Rocks.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
builder - Copy/builder/Mono.Cecil.Rocks.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral7
Sample
builder - Copy/builder/Mono.Cecil.dll
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
builder - Copy/builder/Mono.Cecil.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral9
Sample
builder - Copy/builder/StormKittyBuilder.exe
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
builder - Copy/builder/StormKittyBuilder.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral11
Sample
builder - Copy/builder/build.exe
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
builder - Copy/builder/build.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral13
Sample
builder - Copy/builder/stub.exe
Resource
win7-20241010-en
Behavioral task
behavioral14
Sample
builder - Copy/builder/stub.exe
Resource
win10v2004-20250217-en
General
-
Target
builder - Copy/builder/StormKittyBuilder.exe
-
Size
17KB
-
MD5
e936b50ab766fb1fdfee7b01b3e4450a
-
SHA1
6b45ee8349b61604c4007e775e34c8ca45cae16b
-
SHA256
241b415fdfc53d5c0df654fa70cdf4ddb9df6d5cac6d42e465f521f4321ffdfb
-
SHA512
d3091a39156bad832f2d9faee22ddc0f3055dc2562f93a0a5ead04938b528c202a9658d02ef3f5b3f2c36f4508b970d815033cb32e18f7098629b105a1fe93b8
-
SSDEEP
192:haVr0QqQdHrlZ/28pGdQCOhNQuMMgKCg3t5p70fOVXIjXFEs55zh4+W/YbWnTrev:KDOghNEMcg9PZrs5HQ/YXc
Malware Config
Signatures
-
StormKitty
StormKitty is an open source info stealer written in C#.
-
StormKitty payload 1 IoCs
resource yara_rule behavioral9/memory/1628-1-0x000000013F520000-0x000000013F528000-memory.dmp family_stormkitty -
Stormkitty family