Overview

overview

10

Static

static

4fded95fb7...26.exe

windows7-x64

10

4fded95fb7...26.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4fded95fb71c1918c15f2ec21cedad80698fa1bd8e34c01e2f23c90237050226

  • Size

    1.0MB

  • Sample

    220719-yarrbsaec2

  • MD5

    669fc906d8becd3d67f3d13317e53334

  • SHA1

    80e9a8fe7084fd5d36ed4b1324ca1532ef5dc0c3

  • SHA256

    4fded95fb71c1918c15f2ec21cedad80698fa1bd8e34c01e2f23c90237050226

  • SHA512

    6b346ccf649d4bd1db953e2509442fdd2da21e182e237d43b116ffcb8af64b2403ca43a0f844f1a2fcc545a5fac6aba2ff144808dee11130af367e672275d2be

Score
10/10
isrstealercollectionspywarestealertrojanupx

Malware Config

Targets

    • Target

      4fded95fb71c1918c15f2ec21cedad80698fa1bd8e34c01e2f23c90237050226

    • Size

      1.0MB

    • MD5

      669fc906d8becd3d67f3d13317e53334

    • SHA1

      80e9a8fe7084fd5d36ed4b1324ca1532ef5dc0c3

    • SHA256

      4fded95fb71c1918c15f2ec21cedad80698fa1bd8e34c01e2f23c90237050226

    • SHA512

      6b346ccf649d4bd1db953e2509442fdd2da21e182e237d43b116ffcb8af64b2403ca43a0f844f1a2fcc545a5fac6aba2ff144808dee11130af367e672275d2be

    Score
    10/10
    isrstealercollectionstealertrojanupxspyware

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • Nirsoft

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook accounts

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks