General
- Target Client.exe
- Size 3.2MB
- Sample261109-psmewsct71
- SHA256 2416fa4fbae5cf4e42e8037df6730aeeb7c2fd85ff420c3e048b9b8b0a53e151
- MD5 41ffc57a95c725651de7b10d7e9ed3c9
- SHA1 9e942494d06ca51621acc8c9bdad9402c320ed54
- SHA512 a04516732e2735d9e5c7eef3d776876c0788f17b9a189b331c0ceafe05bdcd99d38cb9587055526727247f4c0fa58b4da8dbd63716d32a62678939fd838e5a83
- SSDEEP 49152:YF7lqmuI81fFz12ShzPMAzU0mdBdo+6WuDayPNr/NxJ:YCIMf+S9J
- TLSH T1CCF53A416BE8CE1BE1BF2775A4F201111BB1E449A732D78F1698E6792C637406D0A3BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Client.exe
Resource
win10v2004-20260911-en
8 signatures
600 seconds
Malware Config
Targets
-
- Target Client.exe
- Size 3.2MB
- SHA256 2416fa4fbae5cf4e42e8037df6730aeeb7c2fd85ff420c3e048b9b8b0a53e151
- MD5 41ffc57a95c725651de7b10d7e9ed3c9
- SHA1 9e942494d06ca51621acc8c9bdad9402c320ed54
- SHA512 a04516732e2735d9e5c7eef3d776876c0788f17b9a189b331c0ceafe05bdcd99d38cb9587055526727247f4c0fa58b4da8dbd63716d32a62678939fd838e5a83
- SSDEEP 49152:YF7lqmuI81fFz12ShzPMAzU0mdBdo+6WuDayPNr/NxJ:YCIMf+S9J
- TLSH T1CCF53A416BE8CE1BE1BF2775A4F201111BB1E449A732D78F1698E6792C637406D0A3BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10StormKitty payload
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.