Overview

overview

10

Static

static

862d2963fd...25.exe

windows7-x64

10

862d2963fd...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    862d2963fdda4c40ac84b0edfacb150d7b094aa8a00b748c5437274f7e61cb25

  • Size

    884KB

  • Sample

    221004-b6ncfsgacn

  • MD5

    30990bcd176c250fe100aa06df2a6072

  • SHA1

    bbe0b6203c89b9502b97e1ad6015ffe9af443503

  • SHA256

    862d2963fdda4c40ac84b0edfacb150d7b094aa8a00b748c5437274f7e61cb25

  • SHA512

    a7aa9f6aec421b1305e6e895deddea655e4173a1a58911ee62685d23b5529409b08f3e8e0fa10546d98bbbc7330ca7e0046653e51b310714390cb1ef91cf4628

  • SSDEEP

    12288:FHey6uqi1e6/xf3Bp/JvH0mGIPP9rQarZAqGaOaPurAaIfw:leL

Score
10/10
isrstealerspywarestealertrojanupx

Malware Config

Targets

    • Target

      862d2963fdda4c40ac84b0edfacb150d7b094aa8a00b748c5437274f7e61cb25

    • Size

      884KB

    • MD5

      30990bcd176c250fe100aa06df2a6072

    • SHA1

      bbe0b6203c89b9502b97e1ad6015ffe9af443503

    • SHA256

      862d2963fdda4c40ac84b0edfacb150d7b094aa8a00b748c5437274f7e61cb25

    • SHA512

      a7aa9f6aec421b1305e6e895deddea655e4173a1a58911ee62685d23b5529409b08f3e8e0fa10546d98bbbc7330ca7e0046653e51b310714390cb1ef91cf4628

    • SSDEEP

      12288:FHey6uqi1e6/xf3Bp/JvH0mGIPP9rQarZAqGaOaPurAaIfw:leL

    Score
    10/10
    isrstealerspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks