isrstealer | 17bae53213efafccaca9971d9b513ec3b33e03e745ed08b75d9ee43b9ca4351f

General

Target

17bae53213efafccaca9971d9b513ec3b33e03e745ed08b75d9ee43b9ca4351f
Size

577KB
Sample

220608-yq7gqaahg9
MD5

4bb2602bbd399e0107bf087a28435d85
SHA1

81bf0f9957e66e518ae1c186bddcfaef293ed9d4
SHA256

17bae53213efafccaca9971d9b513ec3b33e03e745ed08b75d9ee43b9ca4351f
SHA512

5bbdaac5bfd1b071554ae8e148a2056b551a0edd5323ebb43b53c51b18ac1edd9a303ef6970dca7b655e86af07c7bef897c39a0d5043533d9df72ae25e024eb6

Score

10^/10

Malware Config

Targets

- Target
  
  17bae53213efafccaca9971d9b513ec3b33e03e745ed08b75d9ee43b9ca4351f
- Size
  
  577KB
- MD5
  
  4bb2602bbd399e0107bf087a28435d85
- SHA1
  
  81bf0f9957e66e518ae1c186bddcfaef293ed9d4
- SHA256
  
  17bae53213efafccaca9971d9b513ec3b33e03e745ed08b75d9ee43b9ca4351f
- SHA512
  
  5bbdaac5bfd1b071554ae8e148a2056b551a0edd5323ebb43b53c51b18ac1edd9a303ef6970dca7b655e86af07c7bef897c39a0d5043533d9df72ae25e024eb6
Score

10^/10

isrstealer collection spyware stealer suricata trojan upx
- ISR Stealer
  ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
  trojan stealer isrstealer
- ISR Stealer Payload
- suricata: ET MALWARE ISRStealer Checkin
  suricata: ET MALWARE ISRStealer Checkin
  suricata
- NirSoft MailPassView
  Password recovery tool for various email clients
- Nirsoft
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook accounts
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ISR Stealer

ISR Stealer Payload

suricata: ET MALWARE ISRStealer Checkin

NirSoft MailPassView

Nirsoft

UPX packed file

Reads user/profile data of web browsers

Accesses Microsoft Outlook accounts

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2