General

  • Target
    Client.exe
  • Size 3.2MB
  • Sample261109-psmewsct71
  • SHA256 2416fa4fbae5cf4e42e8037df6730aeeb7c2fd85ff420c3e048b9b8b0a53e151
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Client.exe
    • Size 3.2MB
    • SHA256 2416fa4fbae5cf4e42e8037df6730aeeb7c2fd85ff420c3e048b9b8b0a53e151
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Family: StormKitty

      StormKitty is an open source info stealer written in C#.

    • StormKitty payload

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks