{
  "name": "Kematian-Stealer: A Deep Dive into a New Information Stealer",
  "slug": "kematian-stealer-a-deep-dive-into-a-new-information-stealer",
  "description": "This report provides an in-depth analysis of a newly discovered information stealer named Kematian-Stealer, actively developed on GitHub and distributed as open-source software. The malware employs various techniques to collect sensitive data from compromised systems, evade detection, and maintain persistence, posing a significant threat to individuals and organizations.",
  "published": "2024-07-10T08:08:46+00:00",
  "created_at": "2024-07-10T08:08:46+00:00",
  "modified_at": "2024-07-10T08:30:58+00:00",
  "created_at_opencti": "2024-07-10T08:08:46+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-07-10",
    "data exfiltration",
    "github",
    "kematian stealer",
    "malware",
    "persistence",
    "stealer"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "cf2affe891d09bf79c912e9dc1e6cd4d4f8fc4f9579876c54d11a4344d5446fb"
      },
      {
        "id": "",
        "name": "e7cec26b659674a5cb75cf03e6046f2e1f25b52fe0ba36214a8e4864e0cccb53"
      },
      {
        "id": "",
        "name": "8efbf26a851ce6e6e060a808633b968b6337a8e2807178876d03d663083dcf5e"
      },
      {
        "id": "",
        "name": "8a00861d8549920dd29ffa597f4cf137834458cc596e4ed2faf09336e778c0e3"
      }
    ],
    "malware": [
      {
        "id": "b41dda2c-2f4c-4daf-a8ca-c51eb210e0fd",
        "name": "Kematian-Stealer",
        "slug": "kematian-stealer-0a02e919"
      }
    ],
    "intrusion_sets": [
      {
        "id": "c36f9641-b800-4921-ba1a-a00297bae98f",
        "name": "KDot227",
        "slug": "kdot227"
      }
    ],
    "attack_patterns": [
      {
        "id": "0ca071fb-4f52-4672-b64a-75deff57d874",
        "name": "T1048"
      },
      {
        "id": "5882a135-5b7e-4caf-93e8-80f7df41cef2",
        "name": "T1564.001"
      },
      {
        "id": "6efb8bea-11d7-418d-a429-9f4a3e6c50f6",
        "name": "T1087"
      },
      {
        "id": "8e0fea81-4d54-4e88-a7dd-3aa8b26558ed",
        "name": "T1113"
      },
      {
        "id": "196f2a64-c55b-47a6-8e38-beb76ba700b6",
        "name": "T1204.002"
      },
      {
        "id": "97d377d8-89c7-48f8-a79f-0f48bd60df74",
        "name": "T1005"
      },
      {
        "id": "70616b2f-4019-4963-b758-5d9f6f20e201",
        "name": "T1082"
      },
      {
        "id": "cbd87c8c-3bed-461a-acef-56ffc8b87571",
        "name": "T1105"
      },
      {
        "id": "dc410646-9cdd-427b-92e7-179a54f78f90",
        "name": "T1566.001"
      },
      {
        "id": "45082a8e-9c79-470e-ad1b-decac7188e8f",
        "name": "T1083"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "bb20a9e1-f4f6-459d-94f4-470c6867dc2d",
        "name": "T1053"
      },
      {
        "id": "c1e3fabe-9e8b-4e8f-a1f8-bf23e234e770",
        "name": "T1485"
      },
      {
        "id": "fa3b8b48-d97c-4242-83a6-07d435a5a79e",
        "name": "T1041"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      },
      {
        "id": "9b6064e6-a05b-4e95-baf5-34d180bc9221",
        "name": "T1059"
      }
    ]
  },
  "external_refs": [
    "https://www.cyfirma.com/research/kematian-stealer-a-deep-dive-into-a-new-information-stealer",
    "https://otx.alienvault.com/pulse/668e5daf4bc143e93672d0de"
  ]
}