Overview

overview

10

Static

static

10

build.exe

windows7-x64

10

build.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    build.exe

  • Size

    106KB

  • Sample

    250222-wl1ghawry6

  • MD5

    d493043aa0552958e41056bfb9ed5feb

  • SHA1

    3bc3589ad6f4dd49d9b8286061abfebbfe9bf192

  • SHA256

    1bbf4c9d2abb1b0fa5752c0f401cc1cb04fd6469622be6d87486aae73fdcce4b

  • SHA512

    69a81f35a199307efd9a6b50f12a783c8b7439d6fca554a1d9a6d8405b0fe8e65acdf15df89a710d03acf6d9a0a176acf0ed9cdb4fd7bb0f666705821ec2ccee

  • SSDEEP

    1536:87YfZJRZk79XP3yTigigkD2V37AUIuvQ7sG69bAdI4pxReUbpppybDQJ:s+RZk753yTwQOWQ7sR9bGpxReUbppz

Score
10/10
stormkittystealer

Malware Config

Targets

    • Target

      build.exe

    • Size

      106KB

    • MD5

      d493043aa0552958e41056bfb9ed5feb

    • SHA1

      3bc3589ad6f4dd49d9b8286061abfebbfe9bf192

    • SHA256

      1bbf4c9d2abb1b0fa5752c0f401cc1cb04fd6469622be6d87486aae73fdcce4b

    • SHA512

      69a81f35a199307efd9a6b50f12a783c8b7439d6fca554a1d9a6d8405b0fe8e65acdf15df89a710d03acf6d9a0a176acf0ed9cdb4fd7bb0f666705821ec2ccee

    • SSDEEP

      1536:87YfZJRZk79XP3yTigigkD2V37AUIuvQ7sG69bAdI4pxReUbpppybDQJ:s+RZk753yTwQOWQ7sR9bGpxReUbppz

    Score
    10/10
    stormkittystealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Stormkitty family

      stormkitty

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks