Overview

overview

10

Static

static

8

a3dc490ec0...ae.exe

windows7-x64

10

a3dc490ec0...ae.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3dc490ec02ee2f59cac822c556b67206f05856e0e50479cbd3e496d705a47ae

  • Size

    538KB

  • Sample

    221130-bxyrtsaf2y

  • MD5

    580aaadbd22f17364744c521d1e80010

  • SHA1

    6e7ac3387d91a4b80ee4ef0d2ebb67d510e4f871

  • SHA256

    a3dc490ec02ee2f59cac822c556b67206f05856e0e50479cbd3e496d705a47ae

  • SHA512

    10a3d31b2dd7ac4d1df388fb60726becbeba970b1fd03e04bf5dea012c14b451e60f2b864fe6213f1f6ae1520f03e4c847f8ccc7ae717ce37ab700d19573ab97

  • SSDEEP

    12288:jbEW3uPGfUkzQsaSZ4hOWHcyvz2Z/ohGFN:j4PBs7KsWHcms/kGF

Score
10/10
isrstealerspywarestealertrojanupx

Malware Config

Targets

    • Target

      a3dc490ec02ee2f59cac822c556b67206f05856e0e50479cbd3e496d705a47ae

    • Size

      538KB

    • MD5

      580aaadbd22f17364744c521d1e80010

    • SHA1

      6e7ac3387d91a4b80ee4ef0d2ebb67d510e4f871

    • SHA256

      a3dc490ec02ee2f59cac822c556b67206f05856e0e50479cbd3e496d705a47ae

    • SHA512

      10a3d31b2dd7ac4d1df388fb60726becbeba970b1fd03e04bf5dea012c14b451e60f2b864fe6213f1f6ae1520f03e4c847f8ccc7ae717ce37ab700d19573ab97

    • SSDEEP

      12288:jbEW3uPGfUkzQsaSZ4hOWHcyvz2Z/ohGFN:j4PBs7KsWHcms/kGF

    Score
    10/10
    isrstealerspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks