Overview

overview

7

Static

static

3

1.02/Kitty.dll

windows10-2004-x64

1

1.02/Kitty.dll

windows11-ltsc_2024-x64

1

1.02/Kitty.exe

windows10-2004-x64

7

1.02/Kitty.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    24s
  • max time network
    25s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 15:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    1.02/Kitty.exe
  • Size 38.3MB
  • Sample260930-ss3cwsbd96
  • SHA256 b57b1b2fc73b7926301d93c0bdd24f349524ff31bb9b2d87a7269f958e4af201
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 39 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 56 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1.02\Kitty.exe
    "C:\Users\Admin\AppData\Local\Temp\1.02\Kitty.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4836
    • C:\Users\Admin\AppData\Local\Temp\1.02\Kitty.exe
      "C:\Users\Admin\AppData\Local\Temp\1.02\Kitty.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1360

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\bin\MSVCP140.dll
        • Size 544KB
        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\bin\MSVCP140_1.dll
        • Size 35KB
        • SHA256 bfad5aef4c63a669e3c140655cdfdf395b6c979b400a447bd5dcb65ed8826c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\bin\MSVCP140_2.dll
        • Size 273KB
        • SHA256 3ea06f0ee098b4823cb79599df3780e7f23cce52c19aac31d2a0d47efe33a5e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\bin\Qt6Core.dll
        • Size 9.6MB
        • SHA256 9fbea00b87ceae5f9e319c23010eacb903ed460c661b9b1b17bcabd02bf1eec2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\bin\Qt6Gui.dll
        • Size 9.1MB
        • SHA256 63c31e9f79faee8e6ac3919f13be59d293c4fa5f091d200cb683c9f1ea4e6ae7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\bin\Qt6Widgets.dll
        • Size 6.3MB
        • SHA256 6c139cf501fd4a4cf2b690520df79dd02687df061d51eb6b3c91757d503ef909
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\bin\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qgif.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qgif.dll
        • Size 47KB
        • SHA256 c0f3a53dc57682b157ad50e8c2671191c629d715871afd9b5c017a4be1f4e247
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qicns.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qicns.dll
        • Size 55KB
        • SHA256 32e8d47268d19e09a1c2728b7d9bfb998bd6b30f4dfaf5d48c3e0b13f5263256
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qico.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qico.dll
        • Size 45KB
        • SHA256 a9f940f04e2511ec6c25e083635ca7e0c88518b33745ac84beb611c0feb8d497
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qjpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qjpeg.dll
        • Size 565KB
        • SHA256 a9d019fa4d8d8b9b4d14c9faff2459f4a1b450ae6bdc9193c53106544cb8c92b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qpdf.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qpdf.dll
        • Size 42KB
        • SHA256 6d9efd050375c82cec1eaae20894a56fb2191f22d41758ce920b06e0a5a7c736
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qsvg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qsvg.dll
        • Size 39KB
        • SHA256 ddadba1f19ca590b3a2c1677da2fadcbb2115fb7c32aeab0d5fa049633995e69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qtga.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qtga.dll
        • Size 38KB
        • SHA256 036ee98fb6b07b8c84bd23daf431c1b1dadaed1ba6ea71fa76d8e1afefad3da9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qtiff.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qtiff.dll
        • Size 432KB
        • SHA256 5ef5489a39850ac3f0a960edcf76587e877fbb66aaf62a41e9fa267fbc39bf5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwbmp.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qwbmp.dll
        • Size 36KB
        • SHA256 11f9052ad1682458731cb2793f043a094ca917f89f0448f99a41c21b4c22faea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwebp.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\imageformats\qwebp.dll
        • Size 550KB
        • SHA256 055e44b348868a8c125af0eda01813aedaf7da4e37e1eab09fa869d353b2da7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qminimal.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\platforms\qminimal.dll
        • Size 61KB
        • SHA256 9d10186aa74cdb50e499b69a6a78e0a0b0398615fb1f0a4769b909539bf4fab4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qoffscreen.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\platforms\qoffscreen.dll
        • Size 112KB
        • SHA256 41781308ce8cee4cd05a4ed8958761fe48dc2c5159bd114c942b953bc91f2c1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qwindows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\platforms\qwindows.dll
        • Size 974KB
        • SHA256 d58c61f02c2c477fd8d423259f6c51f65ed8c57c6aa2df3dd98272d47974a38c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        qmodernwindowsstyle.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\Qt6\plugins\styles\qmodernwindowsstyle.dll
        • Size 219KB
        • SHA256 138701f32f1f570f46f50b6779d35d0b52175ee7eba37e6f26918321daa65d22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\QtCore.pyd
        • Size 2.5MB
        • SHA256 9306ceffdc3b663f90fc446800be4ab870887c0bf3c38dc16b00e070e519d895
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\QtGui.pyd
        • Size 2.2MB
        • SHA256 78f1acd16154a241101ead83c845388394526b9e4ddc7bdc914d22d96710f7bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\QtWidgets.pyd
        • Size 4.9MB
        • SHA256 a5e78921d92d4b4975edbd441369ef7ab689e336d1b40d8555728880f0503fd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sip.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\PyQt6\sip.cp314-win_amd64.pyd
        • Size 109KB
        • SHA256 42baece39b566cd4fc16088bb0e830b2423a1becb5752ef529b72192092ceda6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\_bz2.pyd
        • Size 85KB
        • SHA256 33641a8ad0403473d678c7435197d49550fc5185ba7979fb16ab80256b1f9072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\_ctypes.pyd
        • Size 139KB
        • SHA256 79967d8614f735cc62b81649641fd8d0414ca66d3d6656fa7788334bbdbbd35b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\_lzma.pyd
        • Size 157KB
        • SHA256 a01f1927adaa60adcfbe3b0314205a528cb9dd5a93b7e61cb284eddee9b0b347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\_socket.pyd
        • Size 85KB
        • SHA256 435a86973131c5d5dc90f828e72d7bb0607578a48ab5bc5377f4a280a6beb8f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\_zstd.pyd
        • Size 491KB
        • SHA256 e5924e2985186797668dd3b2e1efeb9313459258a4564dbf5499935c7ebd44e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\base_library.zip
        • Size 1.3MB
        • SHA256 e32a19f75a0a1674e3e3a2574df29d5162daa99a3d5c774bd218bb8c71009fb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _psutil_windows.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\psutil\_psutil_windows.pyd
        • Size 76KB
        • SHA256 67c17558b635d6027ddbb781ea4e79fc0618bbec7485bd6d84b0ebcd9ef6a478
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\python3.dll
        • Size 72KB
        • SHA256 1dd696f02326e32e67b52c25b249b3acce3238176212d16e8fb1a050a1455ae9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\python314.dll
        • Size 6.5MB
        • SHA256 a07f7d09c3121492bb066535c6d0811df5fbc2090cbca7031a97bb47ce1480c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000012e42\ucrtbase.dll
        • Size 1.1MB
        • SHA256 c04daeba7e7c4b711d33993ab4c51a2e087f98f4211aea0dcb3a216656ba0ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1360-243-0x000001A1AB230000-0x000001A1AB240000-memory.dmp
        Download

        memory/1360-236-0x00007FFF863E0000-0x00007FFF868C0000-memory.dmp
        Download

        memory/1360-239-0x00007FFF8B390000-0x00007FFF8B5C4000-memory.dmp
        Download

        memory/1360-232-0x00007FFF85D90000-0x00007FFF863D6000-memory.dmp
        Download

        memory/1360-217-0x00007FFF88850000-0x00007FFF88ADD000-memory.dmp
        Download