isrstealer | 4b4138636d2afe18abff9cde7681abb2c6c16bdf1e21d665eb1fa7b6f6f1b447 | Triage

Submit
Reports

Overview

overview

Static

static

4b4138636d...47.exe

windows7-x64

4b4138636d...47.exe

windows10-2004-x64

Sharing

General

Target

4b4138636d2afe18abff9cde7681abb2c6c16bdf1e21d665eb1fa7b6f6f1b447
Size

376KB
Sample

221020-y4fk6adcd4
MD5

510577ca032cd0e24d889871ad787e60
SHA1

7d7a039db3bcfe6bd19f0e8024f6abf85f42f7e9
SHA256

4b4138636d2afe18abff9cde7681abb2c6c16bdf1e21d665eb1fa7b6f6f1b447
SHA512

585f1ca45e00466d658f29f1b7656ed833f7280bf3866002a00f410f67550bf038bb95f5273bb672a5359844a27cb04acb6968cf32d9b6af59aff362fb30bbe1
SSDEEP

6144:fXgv5RyS+L5oFzU0oyeXRfcuWKNwh0Z4kXT2VX7I1tpDJhrFUhc3OVyr4:PghkVkzU0rehWKQkXCVmplhroyr

Score

10^/10

isrstealer collection stealer trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

4b4138636d2afe18abff9cde7681abb2c6c16bdf1e21d665eb1fa7b6f6f1b447.exe

Resource

win7-20220901-en

isrstealer collection stealer trojan upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

4b4138636d2afe18abff9cde7681abb2c6c16bdf1e21d665eb1fa7b6f6f1b447.exe

Resource

win10v2004-20220812-en

isrstealer stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  4b4138636d2afe18abff9cde7681abb2c6c16bdf1e21d665eb1fa7b6f6f1b447
- Size
  
  376KB
- MD5
  
  510577ca032cd0e24d889871ad787e60
- SHA1
  
  7d7a039db3bcfe6bd19f0e8024f6abf85f42f7e9
- SHA256
  
  4b4138636d2afe18abff9cde7681abb2c6c16bdf1e21d665eb1fa7b6f6f1b447
- SHA512
  
  585f1ca45e00466d658f29f1b7656ed833f7280bf3866002a00f410f67550bf038bb95f5273bb672a5359844a27cb04acb6968cf32d9b6af59aff362fb30bbe1
- SSDEEP
  
  6144:fXgv5RyS+L5oFzU0oyeXRfcuWKNwh0Z4kXT2VX7I1tpDJhrFUhc3OVyr4:PghkVkzU0rehWKQkXCVmplhroyr
Score

10^/10

isrstealer collection stealer trojan upx
- ISR Stealer
  ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
  trojan stealer isrstealer
- ISR Stealer payload
- NirSoft MailPassView
  Password recovery tool for various email clients
- Nirsoft
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Accesses Microsoft Outlook accounts
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

isrstealercollectionstealertrojanupx

behavioral2

isrstealerstealertrojan

© 2018-2025

Terms | Privacy