Overview

overview

10

Static

static

c299df78fc...1a.exe

windows7-x64

10

c299df78fc...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c299df78fc3a4bedcea46d323e4218c871fba4b249225e6193ac10a9d49abb1a

  • Size

    322KB

  • Sample

    221126-nsgc7sed6z

  • MD5

    b0d591714fd57b2f69e66a3b0a5987e7

  • SHA1

    8a9a7f5c3d282c426becf850f882ea98ecc3e077

  • SHA256

    c299df78fc3a4bedcea46d323e4218c871fba4b249225e6193ac10a9d49abb1a

  • SHA512

    6e9076044cacf50f2baeb2ab011ab325566fdfcbbc63ef112a9f39808271230b82f9b76536887f5ae516a21e4d81ff06e613b726718d2df2c3b3164f60b327e6

  • SSDEEP

    6144:O09bHgsZ4nQhu7mVBdKhV2hIEh4zz8DfIAZW8yYD7eADPQNIbmKx:prBh5BdKv2yk40LIWNG0L

Score
10/10
isrstealercollectionspywarestealertrojanupx

Malware Config

Targets

    • Target

      c299df78fc3a4bedcea46d323e4218c871fba4b249225e6193ac10a9d49abb1a

    • Size

      322KB

    • MD5

      b0d591714fd57b2f69e66a3b0a5987e7

    • SHA1

      8a9a7f5c3d282c426becf850f882ea98ecc3e077

    • SHA256

      c299df78fc3a4bedcea46d323e4218c871fba4b249225e6193ac10a9d49abb1a

    • SHA512

      6e9076044cacf50f2baeb2ab011ab325566fdfcbbc63ef112a9f39808271230b82f9b76536887f5ae516a21e4d81ff06e613b726718d2df2c3b3164f60b327e6

    • SSDEEP

      6144:O09bHgsZ4nQhu7mVBdKhV2hIEh4zz8DfIAZW8yYD7eADPQNIbmKx:prBh5BdKv2yk40LIWNG0L

    Score
    10/10
    isrstealercollectionspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • Nirsoft

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook accounts

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks