Overview

overview

10

Static

static

10

971bfb7229...3e.exe

windows7-x64

10

971bfb7229...3e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    971bfb7229a9065a3ec091cd153e6fb3fc65a546fbeaf6b69eb21ebcb233be3e

  • Size

    76KB

  • Sample

    221021-z4ybmsgac6

  • MD5

    6df7cae8f43f8043b185d520fb3360c0

  • SHA1

    9043f279177150bd6aeeb4dc4f828134d3111b4f

  • SHA256

    971bfb7229a9065a3ec091cd153e6fb3fc65a546fbeaf6b69eb21ebcb233be3e

  • SHA512

    5f20d8cd2d996d53fe4ce3bae3e692d57ec7bd0cd1020d6c38eba70230ca267d42df109b2707531580a6d59a7752724cb63192a81a45ef9db9c27b4ceadddbde

  • SSDEEP

    1536:Cz3HBexMQT+2umeWO2+FPx/lXYVAG8Zs7kfl/ig8OY:PxMQeXYVQsel/iwY

Score
10/10
isrstealerspywarestealertrojan

Malware Config

Targets

    • Target

      971bfb7229a9065a3ec091cd153e6fb3fc65a546fbeaf6b69eb21ebcb233be3e

    • Size

      76KB

    • MD5

      6df7cae8f43f8043b185d520fb3360c0

    • SHA1

      9043f279177150bd6aeeb4dc4f828134d3111b4f

    • SHA256

      971bfb7229a9065a3ec091cd153e6fb3fc65a546fbeaf6b69eb21ebcb233be3e

    • SHA512

      5f20d8cd2d996d53fe4ce3bae3e692d57ec7bd0cd1020d6c38eba70230ca267d42df109b2707531580a6d59a7752724cb63192a81a45ef9db9c27b4ceadddbde

    • SSDEEP

      1536:Cz3HBexMQT+2umeWO2+FPx/lXYVAG8Zs7kfl/ig8OY:PxMQeXYVQsel/iwY

    Score
    10/10
    isrstealerspywarestealertrojan

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks