Overview

overview

10

Static

static

10

e838df8490...89.exe

windows7_x64

10

e838df8490...89.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e838df8490aba78ef72a2313963814589cee3eefb9b862428d05314ae8cfae89

  • Size

    208KB

  • Sample

    220306-rgwkjabbc6

  • MD5

    ae68849e8d645f925050f760cb66ee7e

  • SHA1

    e73fd89936887ff11ca2052b8fc5a149ee93b337

  • SHA256

    e838df8490aba78ef72a2313963814589cee3eefb9b862428d05314ae8cfae89

  • SHA512

    985d5a2df5f890ddff71fb8fc810d700f32c049a46cce7d8110776294e9b52a743107281d7f4ec9335a949b67ebdf0b2c56d479a5c6560e0823522f46df08295

Score
10/10
isrstealerspywarestealertrojanupx

Malware Config

Targets

    • Target

      e838df8490aba78ef72a2313963814589cee3eefb9b862428d05314ae8cfae89

    • Size

      208KB

    • MD5

      ae68849e8d645f925050f760cb66ee7e

    • SHA1

      e73fd89936887ff11ca2052b8fc5a149ee93b337

    • SHA256

      e838df8490aba78ef72a2313963814589cee3eefb9b862428d05314ae8cfae89

    • SHA512

      985d5a2df5f890ddff71fb8fc810d700f32c049a46cce7d8110776294e9b52a743107281d7f4ec9335a949b67ebdf0b2c56d479a5c6560e0823522f46df08295

    Score
    10/10
    isrstealerspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks