Overview

overview

10

Static

static

10

56f55f54b3...e1.exe

windows7-x64

10

56f55f54b3...e1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56f55f54b308f2d4e9b7363063372503ecb4f775340f0e7efe6b0b159aecb4e1

  • Size

    236KB

  • Sample

    221207-d9alwaef71

  • MD5

    df648c762a8b97f781a1adf22ce8eda7

  • SHA1

    e828b66f6593f13c2193368123acee983e8aee08

  • SHA256

    56f55f54b308f2d4e9b7363063372503ecb4f775340f0e7efe6b0b159aecb4e1

  • SHA512

    59392e21cd6bc65eb89bc96900c3f18e3733ccc48ea26a42926f401c4771a6c8246ca6b605300f223aaf9efb713c030f016e09267470d637a62b7a54c5916279

  • SSDEEP

    6144:m3bdXPx3QdIKCC0ef//uXltKc+LVsz9b8Gl:QQdFeCXuLKcCVsz6Gl

Score
10/10
isrstealerspywarestealertrojanupx

Malware Config

Targets

    • Target

      56f55f54b308f2d4e9b7363063372503ecb4f775340f0e7efe6b0b159aecb4e1

    • Size

      236KB

    • MD5

      df648c762a8b97f781a1adf22ce8eda7

    • SHA1

      e828b66f6593f13c2193368123acee983e8aee08

    • SHA256

      56f55f54b308f2d4e9b7363063372503ecb4f775340f0e7efe6b0b159aecb4e1

    • SHA512

      59392e21cd6bc65eb89bc96900c3f18e3733ccc48ea26a42926f401c4771a6c8246ca6b605300f223aaf9efb713c030f016e09267470d637a62b7a54c5916279

    • SSDEEP

      6144:m3bdXPx3QdIKCC0ef//uXltKc+LVsz9b8Gl:QQdFeCXuLKcCVsz6Gl

    Score
    10/10
    isrstealerspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks