Analysis

  • max time kernel
    18s
  • max time network
    15s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/03/2025, 02:30 UTC

General

  • Target

    builder/builder/StormKittyBuilder.exe

  • Size

    17KB

  • MD5

    e936b50ab766fb1fdfee7b01b3e4450a

  • SHA1

    6b45ee8349b61604c4007e775e34c8ca45cae16b

  • SHA256

    241b415fdfc53d5c0df654fa70cdf4ddb9df6d5cac6d42e465f521f4321ffdfb

  • SHA512

    d3091a39156bad832f2d9faee22ddc0f3055dc2562f93a0a5ead04938b528c202a9658d02ef3f5b3f2c36f4508b970d815033cb32e18f7098629b105a1fe93b8

  • SSDEEP

    192:haVr0QqQdHrlZ/28pGdQCOhNQuMMgKCg3t5p70fOVXIjXFEs55zh4+W/YbWnTrev:KDOghNEMcg9PZrs5HQ/YXc

Score
10/10

Malware Config

Signatures

  • StormKitty

    StormKitty is an open source info stealer written in C#.

  • StormKitty payload 1 IoCs
  • Stormkitty family

Processes

  • C:\Users\Admin\AppData\Local\Temp\builder\builder\StormKittyBuilder.exe
    "C:\Users\Admin\AppData\Local\Temp\builder\builder\StormKittyBuilder.exe"
    1⤵
      PID:348

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/348-0-0x00007FFD9D7B3000-0x00007FFD9D7B5000-memory.dmp

      Filesize

      8KB

    • memory/348-1-0x0000013DDF120000-0x0000013DDF128000-memory.dmp

      Filesize

      32KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.