Top Tweets for #Stormkitty

7 months ago

9adced31583a244416e22b6ace8b647f 5 detections @nextronresearch C2: 128[.]79[.]57[.]61:1337 AS5410 Bouygues Telecom SA 🇫🇷 @abuse_ch @bouyguestelecom #StormKitty #AsyncRat

skocherhan's tweet photo. 9adced31583a244416e22b6ace8b647f
5 detections @nextronresearch

C2: 128[.]79[.]57[.]61:1337
AS5410 Bouygues Telecom SA 🇫🇷
@abuse_ch @bouyguestelecom
#StormKitty #AsyncRat https://t.co/8ZEuLrlQw1

0

7

1

2

734

10 months ago

white-rabbit-59829[.]zap[.]cloud gold-owl-45407[.]zap[.]cloud blue-walrus-50946[.]zap[.]cloud readbookstory[.]kozow[.]com 5[.]249[.]165[.]108 208[.]91[.]189[.]183:42421 208[.]91[.]189[.]183:4782 #XWorm #AsyncRAT #StormKitty

skocherhan's tweet photo. white-rabbit-59829[.]zap[.]cloud
gold-owl-45407[.]zap[.]cloud
blue-walrus-50946[.]zap[.]cloud
readbookstory[.]kozow[.]com

5[.]249[.]165[.]108
208[.]91[.]189[.]183:42421
208[.]91[.]189[.]183:4782
#XWorm #AsyncRAT #StormKitty https://t.co/oa8yuX1TBr

Szabolcs Schmidt

@smica83

10 months ago

FUD 'Cli_____________ent.bat' seen from the UK @abuse_ch https://t.co/TsIsndShmT C2: 208.91.189(.)183:4449 (TCP) Only 1 thor yara hit @nextronresearch

0

6

1

2

1K

0

1

0

371

Hunt.io

@Huntio

over 1 year ago

⚠️ Fake Bitdefender Site Spreads Trio of Malware via Spoofed Download Page https://t.co/f71r5fWMOo A malicious campaign is leveraging a fake Bitdefender website that imitates the official Windows download page to deliver a bundled archive containing #VenomRAT, #StormKitty, and #SilentTrinity. Users who believe they are installing antivirus software are instead granting attackers full remote access and credential theft capabilities. To stay protected, always verify download URLs before clicking, avoid installing software from links shared via email or ads, and scan every file, even if it appears to come from a trusted brand. #CyberSecurity #Malware #ThreatIntel

0

4

2

0

347

over 1 year ago

897240fba0486e843c278d6033de055a2f185e15f700593b5a255146e8ab7fe7 #StormKitty

0

1

0

281

Kiwi and stitch 🌈Shadow🌈 @Shadowsmush

over 1 year ago

github[.]com/shram88/setup/raw/main/bin2[.]exe 4bb178da0a560d36af39e243dda93fe45446907a00009210abd6ba1a036a600c First Submission 2021-01-11 14:06:29 UTC anastaf4[.]beget[.]tech:80 5[.]101[.]152[.]204 AS198610 Beget LLC 🇷🇺 #AZORult #c2 #StormKitty

skocherhan's tweet photo. github[.]com/shram88/setup/raw/main/bin2[.]exe
4bb178da0a560d36af39e243dda93fe45446907a00009210abd6ba1a036a600c
First Submission 2021-01-11 14:06:29 UTC

anastaf4[.]beget[.]tech:80
5[.]101[.]152[.]204
AS198610 Beget LLC 🇷🇺
#AZORult #c2 #StormKitty https://t.co/fQ3DKsk0aS

0

2

0

1

244

ak1001 @ak100117

over 1 year ago

Recently, I came across RL Stealer, a .NET-based malware that caught my attention due to its similarities with 44Caliber and StormKitty. Come to check this out!😉 https://t.co/rsRoTBIml9 #RLStealer #44Caliber #StormKitty #Stealer

0

5

2

1

362

over 1 year ago

ITS WAINING PIPE TWEANERS! I just hab to look make sure ims da only one catches in dab storm 😸 #jealouscat #stormkitty #mypipecleaners #bribes #CatsofTwittter #CatsOfX #sundayfunday

0

8

0

200

over 1 year ago

mamisportlive[.]it/blog/1[.]exe 94[.]23[.]64[.]4 AS16276 OVH SAS 🇫🇷 8bcfd81ccfc02af640a747e29cca4b8eacca82bf4961c808b6cbebe2619d0a55 @ovh_support_fr #opendir #stormkitty

skocherhan's tweet photo. mamisportlive[.]it/blog/1[.]exe
94[.]23[.]64[.]4
AS16276 OVH SAS 🇫🇷
8bcfd81ccfc02af640a747e29cca4b8eacca82bf4961c808b6cbebe2619d0a55
@ovh_support_fr #opendir #stormkitty https://t.co/isTev66cv4

1

5

3

2

1K

over 1 year ago

#booking #stormkitty #VenomRat 👇 ⛔️bitl.]to/3YYP 👇 ⛔️roomsvisitor9492[.world 👇 ⛔️185.149.146.]164/wrcaf.ps1 👇 ⛔️147.45.44.131/infopage/ iubn.ps1 iviewers.dll rwvg1.exe ersyb.exe 👇 C2 ⛔️157.20.182.]177 AnyRun https://t.co/7baj2RQRSk Samples https://t.co/BbjrLE4CLr

JAMESWT_WT's tweet photo. #booking #stormkitty #VenomRat
👇
⛔️bitl.]to/3YYP
👇
⛔️roomsvisitor9492[.world
👇
⛔️185.149.146.]164/wrcaf.ps1
👇
⛔️147.45.44.131/infopage/
iubn.ps1
iviewers.dll
rwvg1.exe
ersyb.exe
👇
C2
⛔️157.20.182.]177
AnyRun
https://t.co/7baj2RQRSk
Samples
https://t.co/BbjrLE4CLr https://t.co/dIK5Qoqkxo

over 1 year ago

❇️1/3 #booking #lummastealer #xworm #CredentialFlusher ⛔️book-captcha.]com/FLy1cL?hotel/hoteladmin/extranet_ng/manage/booking.html? 👇 ⛔️book-captcha.]com/recaptcha-verify.html 👇 ⛔️176.113.115.170/1/ 1.png 2.png 3.png AnyRun https://t.co/JiF6V5zb7j ✅

JAMESWT_WT's tweet photo. ❇️1/3
#booking #lummastealer #xworm
#CredentialFlusher
⛔️book-captcha.]com/FLy1cL?hotel/hoteladmin/extranet_ng/manage/booking.html?
👇
⛔️book-captcha.]com/recaptcha-verify.html
👇
⛔️176.113.115.170/1/
1.png
2.png
3.png

AnyRun
https://t.co/JiF6V5zb7j
✅ https://t.co/dqTfqRmhAL

1

27

8

17K

0

21

6

6K

over 1 year ago

#booking #AsynRat #StormKitty 👇 gogl.]to/3HQa 👇 roomsvisitor73730[.world 👇decoded64 185.149.146.]164/trwsfg.ps1 👇 147.45.44.131/infopage/ gqub.bat vfrcxq.ps1 vfdjo.exe yijth.exe ⛔️C2 157.20.182.]177 AnyRun https://t.co/HWUV3AMGyI Samples https://t.co/UFnvbjUea8 1/2 cc @NDA0E

JAMESWT_WT's tweet photo. #booking #AsynRat #StormKitty
👇
gogl.]to/3HQa
👇
roomsvisitor73730[.world
👇decoded64
185.149.146.]164/trwsfg.ps1
👇
147.45.44.131/infopage/
gqub.bat
vfrcxq.ps1
vfdjo.exe
yijth.exe
⛔️C2 157.20.182.]177
AnyRun
https://t.co/HWUV3AMGyI
Samples
https://t.co/UFnvbjUea8
1/2
cc @NDA0E https://t.co/BdAwmOufqr

over 1 year ago

"Availability of Hotel Reservations" #booking #xworm 👇 ⛔️booking.guestquesionrewiews[.com/sign-in? 👇 ⛔️mshta https://recaptcha[.icu/Capcha.html # ✅ ''I am not a robot - reCAPTCHA Verification ID: 3781'' 👇 ⛔️92.255.57.]155/1/ 1.png 2.png Samples https://t.co/MoDmO292jx 1/2

JAMESWT_WT's tweet photo. "Availability of Hotel Reservations"
#booking #xworm
👇
⛔️booking.guestquesionrewiews[.com/sign-in?
👇
⛔️mshta https://recaptcha[.icu/Capcha.html # ✅ ''I am not a robot - reCAPTCHA Verification ID: 3781''
👇
⛔️92.255.57.]155/1/
1.png
2.png

Samples
https://t.co/MoDmO292jx
1/2 https://t.co/tMq40bvBod

2

32

10

5

14K

1

23

6

3

8K

almost 2 years ago

Creative_Brift_Marketing.rar 👇 lnk > job.ps1 > dll 👇 #syncRAT / #StormKitty Samples 👉https://t.co/ibPTopzKvE h/t @malwrhunterteam

0

3

1

769

Yogesh Londhe @suyog41

about 2 years ago

StormKitty Twitch - Payment Plan.msc c79722c11cff8cb0a1f342a8a4e9e7bb n/w https://oshi[.]at/PTgX/jIML.txt drops RfQK.exe #StormKitty 072ed4ac5ad79de811c1ba615036b2cc #Stealer #GrimResource #IOC

JangPro @JangPr0

about 2 years ago

#APT #kimsuky Twitch x Loot Lab Event - 2025.msc 5042f64c0c5b1325964279106f0afa330fb2810416043784f5b4deeef0e93aa4 Encoded File Download : hxxps://cdn.discordapp[.]com/attachments/1123151698899255366/1282214424664604744/Twitch_x_Loot_Lab_Event_-_2025.msc~~~ %public%\Documents

$JangPr0's tweet photo. #APT #kimsuky Twitch x Loot Lab Event - 2025.msc 5042f64c0c5b1325964279106f0afa330fb2810416043784f5b4deeef0e93aa4 Encoded File Download : hxxps://cdn.discordapp[.]com/attachments/1123151698899255366/1282214424664604744/Twitch_x_Loot_Lab_Event_-_2025.msc~~~ %public%\Documents https://t.co/ZY38tHTNJx$

4

31

10

12

7K

1

9

1

1K