isrstealer | 4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e | Triage

Sharing

General

Target

4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e
Size

268KB
MD5

47dff67b61ade1b6905d2a11c176ee70
SHA1

41b3a83e6cd715e61e343a0fda9258cc474bdf00
SHA256

4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e
SHA512

4108206309796fcc50ad10ae72e5706c2add69c717192cc2174d95880ebc4d7773cb40c32403ff227837434df76ad08e15bd149bda239c6f95bf155dfe30f9c7
SSDEEP

6144:bYb//1PxwpdIKCC0ef//uXltKc+LVsz9b8R4jvLXou:xpdFeCXuLKcCVsz6SDLXo

Score

10^/10

isrstealer

Malware Config

Signatures

ISR Stealer payload 1 IoCs

resource	yara_rule
sample	family_isrstealer

Isrstealer family
isrstealer

Files

4a764259016f2f94d5ac816ced803fd1c35bcda6ebc50e2b2b030d767813fc4e
.exe windows x86

7342988ab055a1f3362c0bb541456d42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord660
ord666
ord667
ord593
ord594
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord570
ord571
ord100
ord616
ord617
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ