General

  • Target
    KittytrapV2.exe
  • Size 71.1MB
  • Sample260802-cdnm7asbje
  • SHA256 3a3e102e83a8554af3fbd990d09e6fe87d143126c4cc7352264e3e28edc50592
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      KittytrapV2.exe
    • Size 71.1MB
    • SHA256 3a3e102e83a8554af3fbd990d09e6fe87d143126c4cc7352264e3e28edc50592
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Loads dropped DLL

    • Modifies visibility of existing users in the login screen

      A user account was hidden or made visible on the Windows login screen through a registry modification.

    • Modifies WinLogon

    • Creates a new local user account

      Uses net.exe to create a new local user account, often for persistence or a backdoor account.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v16

Tasks