Overview

overview

10

Static

static

5

98443dba8b...c5.exe

windows7-x64

10

98443dba8b...c5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98443dba8b3a6fed8e3642e06e5a424074b59aa7e830fc24947114e270719fc5

  • Size

    1.1MB

  • Sample

    221129-rynw1sca3t

  • MD5

    e35687e3714e19014b9e43a0c36afedd

  • SHA1

    37dd099b797e0217801aa84262b70da3963c53ad

  • SHA256

    98443dba8b3a6fed8e3642e06e5a424074b59aa7e830fc24947114e270719fc5

  • SHA512

    992ee9d97a91abb169781a4da304f0640e1565f7e8e956353617d682132c5d38bd06759658c451003303d8c10d40c5d208709dd6a58c42a79ba641e3521dc47f

  • SSDEEP

    12288:3aWzgMg7v3qnCiMErQohh0F4CCJ8lny/QVP7emswirRI5j01VdZqFowjtaAt2Pvj:KaHMv6Corjqny/Q5PIRIS1VLAh0AtnsB

Score
10/10
isrstealerspywarestealertrojanupx

Malware Config

Targets

    • Target

      98443dba8b3a6fed8e3642e06e5a424074b59aa7e830fc24947114e270719fc5

    • Size

      1.1MB

    • MD5

      e35687e3714e19014b9e43a0c36afedd

    • SHA1

      37dd099b797e0217801aa84262b70da3963c53ad

    • SHA256

      98443dba8b3a6fed8e3642e06e5a424074b59aa7e830fc24947114e270719fc5

    • SHA512

      992ee9d97a91abb169781a4da304f0640e1565f7e8e956353617d682132c5d38bd06759658c451003303d8c10d40c5d208709dd6a58c42a79ba641e3521dc47f

    • SSDEEP

      12288:3aWzgMg7v3qnCiMErQohh0F4CCJ8lny/QVP7emswirRI5j01VdZqFowjtaAt2Pvj:KaHMv6Corjqny/Q5PIRIS1VLAh0AtnsB

    Score
    10/10
    isrstealerspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks