General

  • Target

    91e3e9cc577255c3515aabc14fc485521098421bc7d77c9bab64fbe9c7b5ab88

  • Size

    1.1MB

  • Sample

    221003-cvfc5scbd8

  • MD5

    46208163f656bf94b2e45a543d5ede62

  • SHA1

    cf2395325249c56aff449b8581242360ca7f4712

  • SHA256

    91e3e9cc577255c3515aabc14fc485521098421bc7d77c9bab64fbe9c7b5ab88

  • SHA512

    2457c265469244772c9bafcc91d9dfd05f6729d4306ce364241eba4b5415f82a50f319f176f9998a910136f09294e3b5e9bf3d7271632b0b8eccfdb64c2fb885

  • SSDEEP

    24576:KaHMv6Corjqny/Q5S0WnXi1FlWJNY3WmNAZnPASur:K1vqjd/Q5SPXitWJNXIrr

Malware Config

Targets

    • Target

      91e3e9cc577255c3515aabc14fc485521098421bc7d77c9bab64fbe9c7b5ab88

    • Size

      1.1MB

    • MD5

      46208163f656bf94b2e45a543d5ede62

    • SHA1

      cf2395325249c56aff449b8581242360ca7f4712

    • SHA256

      91e3e9cc577255c3515aabc14fc485521098421bc7d77c9bab64fbe9c7b5ab88

    • SHA512

      2457c265469244772c9bafcc91d9dfd05f6729d4306ce364241eba4b5415f82a50f319f176f9998a910136f09294e3b5e9bf3d7271632b0b8eccfdb64c2fb885

    • SSDEEP

      24576:KaHMv6Corjqny/Q5S0WnXi1FlWJNY3WmNAZnPASur:K1vqjd/Q5SPXitWJNXIrr

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

    • ISR Stealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks