Static task
static1
Behavioral task
behavioral1
Sample
dc774e92cfce5db8e59c941d1bf667c89b52ed6d9ff881d8029368fbb41175b0.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
dc774e92cfce5db8e59c941d1bf667c89b52ed6d9ff881d8029368fbb41175b0.exe
Resource
win10v2004-20220310-en
General
-
Target
dc774e92cfce5db8e59c941d1bf667c89b52ed6d9ff881d8029368fbb41175b0
-
Size
3.5MB
-
MD5
7f10ce56ef7ceb389c5c7c70bd17a88e
-
SHA1
3f6516b45fe7bb24c1b36a3041d117a04b744651
-
SHA256
dc774e92cfce5db8e59c941d1bf667c89b52ed6d9ff881d8029368fbb41175b0
-
SHA512
74f8382e8fe4945bf42a86f49e78c6f629572c421e31e7f16d5ad9aaed4f87e0826c92561b947f5e8a9b3faa72dd9fddf147310b8e8448005b0907f7ea3231e0
Malware Config
Signatures
-
ISR Stealer Payload 1 IoCs
resource yara_rule sample family_isrstealer -
Isrstealer family
Files
-
dc774e92cfce5db8e59c941d1bf667c89b52ed6d9ff881d8029368fbb41175b0.exe windows x86
7342988ab055a1f3362c0bb541456d42
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord660
ord666
ord667
ord593
ord594
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord570
ord571
ord100
ord616
ord617
ord619
ord581
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ZXRlmreF Size: 20KB - Virtual size: 19KB
RHlEwxYN Size: 16KB - Virtual size: 13KB
CLZaDgzY Size: 8KB - Virtual size: 7KB
jihMQNxO Size: 64KB - Virtual size: 61KB
OsiPGpOy Size: 56KB - Virtual size: 54KB
ymRWKLdJ Size: 72KB - Virtual size: 68KB
ZQmyWYfr Size: 52KB - Virtual size: 51KB
jkADKmPz Size: 4KB - Virtual size: 1KB
NUlbnanN Size: 24KB - Virtual size: 23KB
qSoGKmnt Size: 276KB - Virtual size: 274KB
OBkBrNDP Size: 44KB - Virtual size: 43KB
MEkzrkeT Size: 8KB - Virtual size: 5KB
qcgOHMdb Size: 88KB - Virtual size: 86KB
dEKUUKER Size: 44KB - Virtual size: 41KB
FnPNYZlB Size: 36KB - Virtual size: 33KB
QLGSsJXQ Size: 4KB - Virtual size: 342B
PYkrGKZH Size: 4KB - Virtual size: 742B
JQnYxyXD Size: 100KB - Virtual size: 98KB
RMYgBKSD Size: 52KB - Virtual size: 48KB
tJFWIPwW Size: 212KB - Virtual size: 210KB
VhXLbxju Size: 44KB - Virtual size: 41KB
euNBTkcC Size: 108KB - Virtual size: 104KB
NLYZhbjQ Size: 16KB - Virtual size: 14KB
aRhFUQuH Size: 36KB - Virtual size: 32KB
GBBjzyRC Size: 8KB - Virtual size: 6KB
NrrNLQUG Size: 68KB - Virtual size: 67KB
lwixsbFv Size: 32KB - Virtual size: 30KB
ZIQZhWlx Size: 24KB - Virtual size: 22KB
IaGOYyli Size: 4KB - Virtual size: 1KB
CViKoWNK Size: 32KB - Virtual size: 31KB
pIZRjlPf Size: 8KB - Virtual size: 7KB
yqypTMLh Size: 20KB - Virtual size: 18KB
TEDNSbEF Size: 56KB - Virtual size: 53KB
NyKjVDUC Size: 72KB - Virtual size: 71KB
fzWDDmcr Size: 8KB - Virtual size: 5KB
FIKYfVAX Size: 32KB - Virtual size: 28KB
nLcKVJDD Size: 36KB - Virtual size: 34KB
CyCzKhqv Size: 84KB - Virtual size: 83KB
uUYsEVfc Size: 96KB - Virtual size: 95KB
ZdhMfmFj Size: 52KB - Virtual size: 48KB
zwircTMv Size: 56KB - Virtual size: 55KB
FTdmFygr Size: 364KB - Virtual size: 361KB
nyNCNPHM Size: 24KB - Virtual size: 22KB
BHiAhqHf Size: 12KB - Virtual size: 8KB
dQPzZICK Size: 76KB - Virtual size: 75KB
rBXtoiZn Size: 28KB - Virtual size: 26KB
Ocvchuxj Size: 8KB - Virtual size: 6KB
HIdSgVTI Size: 60KB - Virtual size: 59KB
hixlzHsB Size: 32KB - Virtual size: 28KB
OeCKWFTc Size: 4KB - Virtual size: 3KB
MtsxFFfW Size: 24KB - Virtual size: 22KB
AbtJFgYW Size: 20KB - Virtual size: 18KB
OnlOoGgA Size: 52KB - Virtual size: 50KB
IJCJkjJa Size: 12KB - Virtual size: 10KB
UgoFnsiZ Size: 60KB - Virtual size: 59KB
yCzDQDTF Size: 60KB - Virtual size: 59KB
ckwtMQZt Size: 40KB - Virtual size: 38KB
wQKEPLxa Size: 44KB - Virtual size: 42KB
pCVxdMgo Size: 16KB - Virtual size: 13KB
IJYPIgIz Size: 4KB - Virtual size: 1KB
OJspADfD Size: 40KB - Virtual size: 37KB
uPLHiZWF Size: 4KB - Virtual size: 625B
qoPHSGrQ Size: 32KB - Virtual size: 31KB
jKOYZoYs Size: 8KB - Virtual size: 4KB
QBtCfbYx Size: 192KB - Virtual size: 189KB
mqxxkTrN Size: 16KB - Virtual size: 12KB
syOFOmNo Size: 4KB - Virtual size: 449B