isrstealer | 4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e | Triage

Submit
Reports

Overview

overview

Static

static

4a76425901...4e.exe

windows7-x64

9

4a76425901...4e.exe

windows10-2004-x64

Sharing

General

Target

4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e
Size

268KB
Sample

221021-ts6wraeehj
MD5

47dff67b61ade1b6905d2a11c176ee70
SHA1

41b3a83e6cd715e61e343a0fda9258cc474bdf00
SHA256

4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e
SHA512

4108206309796fcc50ad10ae72e5706c2add69c717192cc2174d95880ebc4d7773cb40c32403ff227837434df76ad08e15bd149bda239c6f95bf155dfe30f9c7
SSDEEP

6144:bYb//1PxwpdIKCC0ef//uXltKc+LVsz9b8R4jvLXou:xpdFeCXuLKcCVsz6SDLXo

Score

10^/10

isrstealer collection spyware stealer trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e.exe

Resource

win7-20220812-en

collection spyware stealer upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e.exe

Resource

win10v2004-20220901-en

isrstealer collection spyware stealer trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e
- Size
  
  268KB
- MD5
  
  47dff67b61ade1b6905d2a11c176ee70
- SHA1
  
  41b3a83e6cd715e61e343a0fda9258cc474bdf00
- SHA256
  
  4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e
- SHA512
  
  4108206309796fcc50ad10ae72e5706c2add69c717192cc2174d95880ebc4d7773cb40c32403ff227837434df76ad08e15bd149bda239c6f95bf155dfe30f9c7
- SSDEEP
  
  6144:bYb//1PxwpdIKCC0ef//uXltKc+LVsz9b8R4jvLXou:xpdFeCXuLKcCVsz6SDLXo
Score

10^/10

collection spyware stealer upx isrstealer trojan
- ISR Stealer
  ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
  trojan stealer isrstealer
- NirSoft MailPassView
  Password recovery tool for various email clients
- Nirsoft
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook accounts
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectionspywarestealerupx

behavioral2

isrstealercollectionspywarestealertrojanupx

© 2018-2025

Terms | Privacy