isrstealer | 08e8b75fb98b28e50863662508ed74de229fbc052923f8db05822861ae081d51

General

Target

7ba1d18562d7219931228d66d4d5e4d1
Size

513KB
Sample

231226-tmvljahbcp
MD5

7ba1d18562d7219931228d66d4d5e4d1
SHA1

b4bd541564dc53bb38dd884c4853cdf035bc5dd5
SHA256

08e8b75fb98b28e50863662508ed74de229fbc052923f8db05822861ae081d51
SHA512

b433fbebf9b81ad42f86a1597b03eb427ac2c93b40aab73bf3eaf9df5786815782009d91d30b2234438f57b5c4cc1d7f94201e3e3d9b34b8339792a3bca697d2
SSDEEP

12288:WcgFDJ6B42I08WbtJc7vmg41KU3ZE0D1msMf+su:p8AB42I0ntJc7vmg41bRHMf+s

Score

10^/10

Malware Config

Targets

- Target
  
  7ba1d18562d7219931228d66d4d5e4d1
- Size
  
  513KB
- MD5
  
  7ba1d18562d7219931228d66d4d5e4d1
- SHA1
  
  b4bd541564dc53bb38dd884c4853cdf035bc5dd5
- SHA256
  
  08e8b75fb98b28e50863662508ed74de229fbc052923f8db05822861ae081d51
- SHA512
  
  b433fbebf9b81ad42f86a1597b03eb427ac2c93b40aab73bf3eaf9df5786815782009d91d30b2234438f57b5c4cc1d7f94201e3e3d9b34b8339792a3bca697d2
- SSDEEP
  
  12288:WcgFDJ6B42I08WbtJc7vmg41KU3ZE0D1msMf+su:p8AB42I0ntJc7vmg41bRHMf+s
Score

10^/10

isrstealer collection spyware stealer trojan upx
- ISR Stealer
  ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
  trojan stealer isrstealer
- ISR Stealer payload
- NirSoft MailPassView
  Password recovery tool for various email clients
- Nirsoft
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Accesses Microsoft Outlook accounts
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1

T1552

Credentials In Files

1

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ISR Stealer

ISR Stealer payload

NirSoft MailPassView

Nirsoft

Loads dropped DLL

Reads user/profile data of web browsers

UPX packed file

Accesses Microsoft Outlook accounts

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2