General
-
Target
123ead4a0cba2ca67d621f835011e12f_JaffaCakes118
-
Size
351KB
-
Sample
240626-rdywgsxgmc
-
MD5
123ead4a0cba2ca67d621f835011e12f
-
SHA1
d28b7f8946faaebe82ce8cc36cce0df640a2c5b5
-
SHA256
9514c96ca877e13960c07ba58f54091df835f1f5b4135c16f9dc4cd78928c85c
-
SHA512
7c8413d165b74ba39c4272ca4dc851d8ceb837eaa251aaf41d66ab43fc7b8bd606a0da0469b533a14ff0b34c55fc87dc8c619c629bd18926ddd82660baae0299
-
SSDEEP
6144:VpQz6Vc6iK52P9osBDxioZPo35ruomQ2m1XrP1Dnoez844Y2nm7zHQD1vxSN:V6QniK5SBEzsI3BrP1bHg4HNPwRvc
Static task
static1
Behavioral task
behavioral1
Sample
123ead4a0cba2ca67d621f835011e12f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
123ead4a0cba2ca67d621f835011e12f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
123ead4a0cba2ca67d621f835011e12f_JaffaCakes118
-
Size
351KB
-
MD5
123ead4a0cba2ca67d621f835011e12f
-
SHA1
d28b7f8946faaebe82ce8cc36cce0df640a2c5b5
-
SHA256
9514c96ca877e13960c07ba58f54091df835f1f5b4135c16f9dc4cd78928c85c
-
SHA512
7c8413d165b74ba39c4272ca4dc851d8ceb837eaa251aaf41d66ab43fc7b8bd606a0da0469b533a14ff0b34c55fc87dc8c619c629bd18926ddd82660baae0299
-
SSDEEP
6144:VpQz6Vc6iK52P9osBDxioZPo35ruomQ2m1XrP1Dnoez844Y2nm7zHQD1vxSN:V6QniK5SBEzsI3BrP1bHg4HNPwRvc
Score10/10-
ISR Stealer
ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
-
ISR Stealer payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Suspicious use of SetThreadContext
-