isrstealer | cf913327ba1ce1f41257b487fd28a44fb37d30c304be39f540f33c07db9007c8

General

Target
cf913327ba1ce1f41257b487fd28a44fb37d30c304be39f540f33c07db9007c8
Size 192KB
Sample221106-ncdblsbddr
SHA256 cf913327ba1ce1f41257b487fd28a44fb37d30c304be39f540f33c07db9007c8
MD5 2d31568421f11dc44b6413c2e96b90a1
SHA1 9ec0aaed51e9b6693def290df054a28b74141007
SHA512 c128f2e1655ca029b759a184bb840fb677f72a110c64a02f3c66ace6e327c8d824590148a4fd500ebdf19a7d53166db94d6579b84da4d647b1e7670a84052288
SSDEEP 3072:3jsAbDs8PxGhlIqPHeMWjnNu5vrtOAwF+G89/e1zHHrM/yRHhNZCX/Tout:oAbw8PxclIceMWjnNYxOBFWeH4/mHhbc
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

isrstealer

ISR Stealer payload 1 IoCs

resource	yara_rule
sample	family_isrstealer

IMPHASH 7342988ab055a1f3362c0bb541456d42
SHA256 cf913327ba1ce1f41257b487fd28a44fb37d30c304be39f540f33c07db9007c8
MD5 2d31568421f11dc44b6413c2e96b90a1
SHA1 9ec0aaed51e9b6693def290df054a28b74141007
SHA512 c128f2e1655ca029b759a184bb840fb677f72a110c64a02f3c66ace6e327c8d824590148a4fd500ebdf19a7d53166db94d6579b84da4d647b1e7670a84052288
SSDEEP 3072:3jsAbDs8PxGhlIqPHeMWjnNu5vrtOAwF+G89/e1zHHrM/yRHhNZCX/Tout:oAbw8PxclIceMWjnNYxOBFWeH4/mHhbc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

4480

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths