Analysis
- max time kernel
30s - max time network
22s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/10/2026, 13:58
General
- Target build.exe
- Size 106KB
- Sample261007-raadqaztbx
- SHA256 f72695155c7bacafb4c3cd41876bfd8e6dd632b339fe119449b45ba2dd0a3f78
Malware Config
Signatures
- Family: StormKitty
StormKitty is an open source info stealer written in C#.
- StormKitty payload 1 IoCs
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
Processes
-
C:\Users\Admin\AppData\Local\Temp\build.exe"C:\Users\Admin\AppData\Local\Temp\build.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4956-0-0x00007FFC0AD5F000-0x00007FFC0AD60000-memory.dmp
memory/4956-1-0x0000000000AC0000-0x0000000000AE0000-memory.dmp
memory/4956-2-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/4956-3-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/4956-4-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/4956-5-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/4956-6-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/4956-7-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/4956-8-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp
memory/4956-9-0x00007FFC0ABD0000-0x00007FFC0B574000-memory.dmp