Extracted

• • Target

    f0db4ce49381eaa871a8bb7301265136eef1f88a1c291b72022c8e94cdf8f97a

  • Size

    488KB

  • MD5

    e0968638796261d3bd533c7f452095c0

  • SHA1

    60b9e96a5d6e5cbf71a01e0530b89115f051a960

  • SHA256

    f0db4ce49381eaa871a8bb7301265136eef1f88a1c291b72022c8e94cdf8f97a

  • SHA512

    e0890b6464f9a2d3ccf1c09b99c8d2fdb16f554b483e6480d896ffb10e314ea7908c1a9d4f4740cb4eb1eea5eae29e4ad1e7a21f3f3950d5d0198f1079153d45

  • SSDEEP

    12288:Y+j2RX5IOHj2XY0uo7vKzB1/xmXke2ovXtf0RS2w3CD9:Y+jS5IOD2I0h7v0B1/Wke2atf0ZwyD

  Score

  10^/10

  isrstealersalitybackdoorcollectionevasionpersistencespywarestealertrojanupx

  • ISR Stealer

    ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

    trojanstealerisrstealer

  • ISR Stealer payload

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • NirSoft MailPassView

    Password recovery tool for various email clients

  • Nirsoft

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Accesses Microsoft Outlook accounts

    collection

  • Adds Run key to start application

    persistence

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops autorun.inf file

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2