Overview

overview

10

Static

static

5

7f1649e79f...af.exe

windows7-x64

10

7f1649e79f...af.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f1649e79f84cf1f80aeb723f8f87ddb737da930d7a82e3f0339828293e87baf

  • Size

    1.4MB

  • Sample

    221206-w9qbfach59

  • MD5

    ff751a7373a480c50c28b39b6b3829cc

  • SHA1

    2703ae455080f51330afabfc82a31b72f7e9bb8d

  • SHA256

    7f1649e79f84cf1f80aeb723f8f87ddb737da930d7a82e3f0339828293e87baf

  • SHA512

    a9a18352f98f14d0a78b571b301872e1abcf0d7dd952cf19caa5b084cf110ddcdc98d92ee1c8920894f084973b6aa5cc994f786caf5850165de9c0af4ded9293

  • SSDEEP

    24576:aRmJkcoQricOIQxiZY1iaGqaEd/PSntrdDoXBwm:/JZoQrbTFZY1iaGXElPGBDoXBwm

Score
10/10
isrstealerspywarestealertrojanupx

Malware Config

Targets

    • Target

      7f1649e79f84cf1f80aeb723f8f87ddb737da930d7a82e3f0339828293e87baf

    • Size

      1.4MB

    • MD5

      ff751a7373a480c50c28b39b6b3829cc

    • SHA1

      2703ae455080f51330afabfc82a31b72f7e9bb8d

    • SHA256

      7f1649e79f84cf1f80aeb723f8f87ddb737da930d7a82e3f0339828293e87baf

    • SHA512

      a9a18352f98f14d0a78b571b301872e1abcf0d7dd952cf19caa5b084cf110ddcdc98d92ee1c8920894f084973b6aa5cc994f786caf5850165de9c0af4ded9293

    • SSDEEP

      24576:aRmJkcoQricOIQxiZY1iaGqaEd/PSntrdDoXBwm:/JZoQrbTFZY1iaGXElPGBDoXBwm

    Score
    10/10
    isrstealerspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks