General
-
Target
e6be87120070bad0c3b395a2523483bc003c2d2aebcadce0d84880ced2d8cea8
-
Size
1.8MB
-
Sample
221128-llzvvsdc26
-
MD5
fd01f244df65f97d3366888a2c0c7b9e
-
SHA1
f1d418d7f95e08846d31bfbe37e118bf2c992352
-
SHA256
e6be87120070bad0c3b395a2523483bc003c2d2aebcadce0d84880ced2d8cea8
-
SHA512
70fddc5cd135cc83a39e9873f26f3a28016f3957114668cff4ac6b17f2b24b450ff2039517d1aa04049aa39ef7508144c7a2aa65e3ee39e679ba122d7c41ac23
-
SSDEEP
12288:2VnKTD0IOdQv8UxHxv3r84bPWI0PB8M2W7KzTVi5T+RssRlPZew0Rj4V/cDA1ORZ:2EOdQ0UDbuMEGIYewW4tcm7M8a
Static task
static1
Behavioral task
behavioral1
Sample
e6be87120070bad0c3b395a2523483bc003c2d2aebcadce0d84880ced2d8cea8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e6be87120070bad0c3b395a2523483bc003c2d2aebcadce0d84880ced2d8cea8.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
e6be87120070bad0c3b395a2523483bc003c2d2aebcadce0d84880ced2d8cea8
-
Size
1.8MB
-
MD5
fd01f244df65f97d3366888a2c0c7b9e
-
SHA1
f1d418d7f95e08846d31bfbe37e118bf2c992352
-
SHA256
e6be87120070bad0c3b395a2523483bc003c2d2aebcadce0d84880ced2d8cea8
-
SHA512
70fddc5cd135cc83a39e9873f26f3a28016f3957114668cff4ac6b17f2b24b450ff2039517d1aa04049aa39ef7508144c7a2aa65e3ee39e679ba122d7c41ac23
-
SSDEEP
12288:2VnKTD0IOdQv8UxHxv3r84bPWI0PB8M2W7KzTVi5T+RssRlPZew0Rj4V/cDA1ORZ:2EOdQ0UDbuMEGIYewW4tcm7M8a
Score10/10-
ISR Stealer
ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
-
ISR Stealer payload
-
NirSoft MailPassView
Password recovery tool for various email clients
-
Nirsoft
-
Accesses Microsoft Outlook accounts
-
Suspicious use of SetThreadContext
-