General

  • Target

    01a2f76516b1efa9d8b50aaad5b09f74664726cfd80255791af34612680fede5

  • Size

    260KB

  • Sample

    220223-bk994agbc3

  • MD5

    f0296e3df1d5f214322cb7b7bcadbdf7

  • SHA1

    a4fffe0486e0db826e712d365de0a0266d7e9344

  • SHA256

    01a2f76516b1efa9d8b50aaad5b09f74664726cfd80255791af34612680fede5

  • SHA512

    2aef2a732f3d31bb8d4b7ba947bcba8f4f9864ed15aad24f51c38834a439bd1c0f204ce30c82cbd9901667a6567bd68863baf82eba21af3bc41ba88df059665b

Malware Config

Targets

    • Target

      01a2f76516b1efa9d8b50aaad5b09f74664726cfd80255791af34612680fede5

    • Size

      260KB

    • MD5

      f0296e3df1d5f214322cb7b7bcadbdf7

    • SHA1

      a4fffe0486e0db826e712d365de0a0266d7e9344

    • SHA256

      01a2f76516b1efa9d8b50aaad5b09f74664726cfd80255791af34612680fede5

    • SHA512

      2aef2a732f3d31bb8d4b7ba947bcba8f4f9864ed15aad24f51c38834a439bd1c0f204ce30c82cbd9901667a6567bd68863baf82eba21af3bc41ba88df059665b

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • Nirsoft

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook accounts

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks