General
- Target KittytrapV2.exe
- Size 71.1MB
- Sample260802-cdnm7asbje
- SHA256 3a3e102e83a8554af3fbd990d09e6fe87d143126c4cc7352264e3e28edc50592
- MD5 c724f6341fbb894f71bc1c599689d734
- SHA1 317aaae4dfc49e9336454a899c217ac8261ecd74
- SHA512 78f8811eb39bd7e489db1034c9c0582d2065015ba644cd6baa9478eec369a42632eb27aefee14ab80c352ac9554aae2a7da90cac113eff87ed94800a8ddfa3c9
- SSDEEP 393216:F5W2o6XzTPy9SkozPWTkvgejY6dnP51ArW/U8tp/lxTp7al8Q6OH0XrvX2MCMZoV:eWyiz+TkvgKpn/jzVROH0zX23Gslgk
- TLSH T13BF7AE15A7D8471AD63FC27CC5638112E6F1B86213A1D6CF8854EE8D3FA3BC16736262
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KittytrapV2.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
KittytrapV2.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Behavioral task
behavioral3
Sample
KittytrapV2.exe
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target KittytrapV2.exe
- Size 71.1MB
- SHA256 3a3e102e83a8554af3fbd990d09e6fe87d143126c4cc7352264e3e28edc50592
- MD5 c724f6341fbb894f71bc1c599689d734
- SHA1 317aaae4dfc49e9336454a899c217ac8261ecd74
- SHA512 78f8811eb39bd7e489db1034c9c0582d2065015ba644cd6baa9478eec369a42632eb27aefee14ab80c352ac9554aae2a7da90cac113eff87ed94800a8ddfa3c9
- SSDEEP 393216:F5W2o6XzTPy9SkozPWTkvgejY6dnP51ArW/U8tp/lxTp7al8Q6OH0XrvX2MCMZoV:eWyiz+TkvgKpn/jzVROH0zX23Gslgk
- TLSH T13BF7AE15A7D8471AD63FC27CC5638112E6F1B86213A1D6CF8854EE8D3FA3BC16736262
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Loads dropped DLL
-
Modifies visibility of existing users in the login screen
A user account was hidden or made visible on the Windows login screen through a registry modification.
-
Modifies WinLogon
-
Creates a new local user account
Uses net.exe to create a new local user account, often for persistence or a backdoor account.
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Persistence
Account Manipulation
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Create Account
1Local Account
1