General

  • Target

    build.exe

  • Size

    106KB

  • Sample

    250226-2b3rrsvybx

  • MD5

    d4b56c94c65d107090492466856d6245

  • SHA1

    65dac4568d8233f0f11897ed6ba6476591b8eb65

  • SHA256

    3a6e68deb7f1b02836bc7693f3edda52f67eacc378af82758fd9b034e5119039

  • SHA512

    d3a15499509062a9adafc4328f51aefbf2b96eade101b4c24703e60ce3d0792c63a3c5d16e51c36799c48fa64441a2f182f837b9e9d3fb1bda2e1e345ea03adc

  • SSDEEP

    1536:U7YfZJRZk79bZn8nESiIkD2V37AUIuvQ7sG69bAdI4pxReUbpxyp6bDQx:U+RZk79Znc4YOWQ7sR9bGpxReUbpYD

Score
10/10

Malware Config

Targets

    • Target

      build.exe

    • Size

      106KB

    • MD5

      d4b56c94c65d107090492466856d6245

    • SHA1

      65dac4568d8233f0f11897ed6ba6476591b8eb65

    • SHA256

      3a6e68deb7f1b02836bc7693f3edda52f67eacc378af82758fd9b034e5119039

    • SHA512

      d3a15499509062a9adafc4328f51aefbf2b96eade101b4c24703e60ce3d0792c63a3c5d16e51c36799c48fa64441a2f182f837b9e9d3fb1bda2e1e345ea03adc

    • SSDEEP

      1536:U7YfZJRZk79bZn8nESiIkD2V37AUIuvQ7sG69bAdI4pxReUbpxyp6bDQx:U+RZk79Znc4YOWQ7sR9bGpxReUbpYD

    Score
    10/10
    • StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Stormkitty family

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks