94e629bdffa6a4e9fe5bc2d10296a5a34d086090c839110249da757c9536f012

Sharing

Copy URL Twitter E-mail

General

Target
Project Kitty Launcher.zip
Size 425KB
Sample260528-e9vsgsgz8w
SHA256 94e629bdffa6a4e9fe5bc2d10296a5a34d086090c839110249da757c9536f012
MD5 8d4aba219535783264d85fd26dcea58d
SHA1 a3a50effd463f7c434b512e5ca6cd7013b149886
SHA512 f7465bc9b1b1790f45dbb2af777b2efc221e98942b7d6286bb70b6d62da29c8f2018ffa1d0671184221b5c79d037db053280eb7e549b8c0921de6905269b40e9
SSDEEP 12288:ER/dJYQal6rt0FG/3BfVN7Fv9KzEjJ1fGgxeIRCdFfiI:2Cd6rt0FGJ7Fv9Kmb/xeIob
TLSH
T1679423DFE6825DF7F3AF99F600B00E5CAB09C708D02A6CEA5571C56B5A0D0F49B891D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Project Kitty Launcher/DiscordRPC.dll
- Size 90KB
- SHA256 b3dccc78588bcffb6cdc574b1b3fbe37af32a4f1d69adcb4b0cbc81f354bd4b2
- MD5 83177cfa660abd9104a9dc2be30920bd
- SHA1 736f87eda0d7a8b1449d860726531237ad30d070
- SHA512 8b18423541172e5031f763c2270f0d568c8ad1f112d54d65d4fde4b4478519085564724c8c5bd106a7152f3d773ce00049695d2b2d2bc5ee8f88bb409fa337a9
- SSDEEP 1536:AVBs5ofyDKHSWTr/20g0Ki+km3fArbjoM9sUwtDzJv+mbxUFSieH:AVeucxCj20g0KoSArb9EtN+m4eH
- TLSH
  T12E931A3057FC8A5ADABE1B34B47052110BF9F94A7931E79F4A4460DE1E03BD18A627B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Project Kitty Launcher/Newtonsoft.Json.dll
- Size 679KB
- SHA256 72cf291d4bab0edd08a9b07c6173e1e7ad1abb7ab727fd7044bf6305d7515661
- MD5 916d32b899f1bc23b209648d007b99fd
- SHA1 e3673d05d46f29e68241d4536bddf18cdd0a913d
- SHA512 60bd2693daa42637f8ae6d6460c3013c87f46f28e9b0dbf9d7f6764703b904a7c8c22e30b4ba13f1f23f6cbee7d9640ee3821c48110e67440f237c2bb2ee5eb6
- SSDEEP 12288:1eos/POdGV5jfWrV/9Yeh9eRcyLfLYtT5mWxTZ/B7jW5JMtRRpKzQk:10/POdGV5jfW5VnhFyvOB7jW5JMty
- TLSH
  T173E4598563F88F6AE29F2B74B830490E4BF1F44AA6B6EBCF4404D4A51CA3755AD00777
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Project Kitty Launcher/ProjectKittyLauncher.Shared.dll
- Size 7KB
- SHA256 9ab4dc40c30b4efe7a0dfdf8f77761f5650d16163d07bf4f002e37cfdd2ac7f1
- MD5 8455cc9dea06a2fdffa37d613c499598
- SHA1 6455c2d92ab727401a87396d50ade4b463b60b66
- SHA512 fbf65e63e76eeb2a62ca2fe819b34466af7520678a6ea4d5fa7d6b637754295c4ddc7bb4a088c8491a6561f048e38d6226e0da3c6a8edcc0995145f259012559
- SSDEEP 96:apXYyC0lptP1btL+mdERj7I6D2hCxCQ0xRnZmWNRhFTt:YS4xbtxaD28UQ0znlNRhL
- TLSH
  T1D5F1973117F8C72AF6BB0B36647602121A33FA296521E77E2718D10F6C2A7095D20FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Project Kitty Launcher/ProjectKittyLauncher.dll
- Size 95KB
- SHA256 7c2b325834bfe41eff9159c603eba38009bf3a8980bdd9e58b662485403bc042
- MD5 5016b36340fecc35b482cd7a31fed523
- SHA1 8a26eb2e87a5cf39c11a1ce6ed5801ee58781ace
- SHA512 7cbca91c86ad684ab247f72bdf58fa8665291828df8028e4ae5cc4ee5748612a92b232e1766386d35ac73aa508083d558d95699118e367c80126e69b941e4839
- SSDEEP 1536:7scxuCqZ7FXutjxeKslKMGoli/Ypd8Xt7Acym+8jlerUWGrehWGvoAoGWTsMeiEI:7o+9sZiEWOr/p0zf1qEvktlaeHD
- TLSH
  T176936B0077FC8A22E2FF1BB844B542121F37FA172662EB5C4D8E15EC9D867854A117E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Project Kitty Launcher/ProjectKittyLauncher.exe
- Size 153KB
- SHA256 1df74f76538cf90351259185c6e631e26b163f3a360ffc7842e538dd16be3c21
- MD5 4cdaf22e3d678df924227978bafd89f3
- SHA1 82f1a907ffe9b0a5d1dfa5d9020a24c32c073692
- SHA512 fab239517efdf9408e92c4460884c28501a782cdd321ba6444c32dc3370d22de73ba0531c0fbdd4f219aaee5bebdb0a10eb1b3157cf8e5270bd4fd76351f8305
- SSDEEP 3072:gqeXA/4yIg9vkNPNu6H6xCYOihUE265eJA:gvgvkNFNaxmpE+J
- TLSH
  T17FE34B07E6A850BDE1B7D679CDA24941FB7378594B71A6CF03504AB60E73BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Drops file in System32 directory
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Contacts third-party web service commonly abused for C2

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10