isrstealer | ed9aa84319abed34e632722d0c483a31195e103f21ddfec4423a5b0c4fd89135

General

Target

ed9aa84319abed34e632722d0c483a31195e103f21ddfec4423a5b0c4fd89135
Size

292KB
Sample

221014-g9bqqabgcq
MD5

46f72a9792eed693a7d4516e8b726f55
SHA1

05c6265aeb56ff9900963189e04735d0ff52ba80
SHA256

ed9aa84319abed34e632722d0c483a31195e103f21ddfec4423a5b0c4fd89135
SHA512

bf1f20aa401979b04c306036b0c73280bcfc13981723284679597cf26e74c0dd0158a498377a50bf694eab4c2ca96fd06780f76b5febe38af88d22d6c6e4e6d0
SSDEEP

6144:IHVtad+e62517rYpuvyjtin+x1VIs+SupvgVRnSBR9DICTxRgDKNzM:Y8d+eZ7rYpuvyjt9mscpkRnSBRm5K9

Score

10^/10

Malware Config

Targets

- Target
  
  ed9aa84319abed34e632722d0c483a31195e103f21ddfec4423a5b0c4fd89135
- Size
  
  292KB
- MD5
  
  46f72a9792eed693a7d4516e8b726f55
- SHA1
  
  05c6265aeb56ff9900963189e04735d0ff52ba80
- SHA256
  
  ed9aa84319abed34e632722d0c483a31195e103f21ddfec4423a5b0c4fd89135
- SHA512
  
  bf1f20aa401979b04c306036b0c73280bcfc13981723284679597cf26e74c0dd0158a498377a50bf694eab4c2ca96fd06780f76b5febe38af88d22d6c6e4e6d0
- SSDEEP
  
  6144:IHVtad+e62517rYpuvyjtin+x1VIs+SupvgVRnSBR9DICTxRgDKNzM:Y8d+eZ7rYpuvyjt9mscpkRnSBRm5K9
Score

10^/10

isrstealer persistence spyware stealer trojan upx
- ISR Stealer
  ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
  trojan stealer isrstealer
- ISR Stealer payload
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

1

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ISR Stealer

ISR Stealer payload

Executes dropped EXE

UPX packed file

Loads dropped DLL

Reads user/profile data of web browsers

Adds Run key to start application

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2