Overview

overview

10

Static

static

c849d828d2...6b.exe

windows7-x64

10

c849d828d2...6b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c849d828d2c86aa314047c3c2ff34dea1c8caaf80c0c07a95218668c84c5ba6b

  • Size

    320KB

  • Sample

    221130-e5w5rabc2t

  • MD5

    b9dcaaabf9f1b53c8bbb7217fbb492b7

  • SHA1

    0d3ff7a06e48adc44f60c7dd04272eb0137cc951

  • SHA256

    c849d828d2c86aa314047c3c2ff34dea1c8caaf80c0c07a95218668c84c5ba6b

  • SHA512

    20568b01a294ba8f3ec4fc849ebcb117b2ce3f92ba5d89e96fbe74f821471af7d565703b2a216b2386c75fb2b7f1b176d924729834ee1e9729ef43be9f810568

  • SSDEEP

    6144:+l4lOFVO6wXgzJofMow/8RDExqYYI+04xOwI/GvdOwHs6mVZ2YRJl:+2lOFVO6x2C8RYD3xyhIOQwHGVZ7

Score
10/10
isrstealercollectionpersistencestealertrojanupx

Malware Config

Targets

    • Target

      c849d828d2c86aa314047c3c2ff34dea1c8caaf80c0c07a95218668c84c5ba6b

    • Size

      320KB

    • MD5

      b9dcaaabf9f1b53c8bbb7217fbb492b7

    • SHA1

      0d3ff7a06e48adc44f60c7dd04272eb0137cc951

    • SHA256

      c849d828d2c86aa314047c3c2ff34dea1c8caaf80c0c07a95218668c84c5ba6b

    • SHA512

      20568b01a294ba8f3ec4fc849ebcb117b2ce3f92ba5d89e96fbe74f821471af7d565703b2a216b2386c75fb2b7f1b176d924729834ee1e9729ef43be9f810568

    • SSDEEP

      6144:+l4lOFVO6wXgzJofMow/8RDExqYYI+04xOwI/GvdOwHs6mVZ2YRJl:+2lOFVO6x2C8RYD3xyhIOQwHGVZ7

    Score
    10/10
    isrstealercollectionpersistencestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • Nirsoft

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Uses the VBS compiler for execution

    • Accesses Microsoft Outlook accounts

      collection

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks