isrstealer | 221f3998c5189acabd57e4c5a83e85bacf8f092ed32a2dcd671e07614b449149

General

Target

1e7d901906c37e2fd8807f5f8edcdae1_JaffaCakes118
Size

538KB
Sample

240702-jf2fdssekh
MD5

1e7d901906c37e2fd8807f5f8edcdae1
SHA1

739164b6ca685b7f0748b703c1fc2390d86351bb
SHA256

221f3998c5189acabd57e4c5a83e85bacf8f092ed32a2dcd671e07614b449149
SHA512

6c7eec8b97bc5dd92a35ed79de1915539314b71fc2c3bf3880beceb587de80c56f2ccac39cc80e3e57aff5243c07c1b7754a216ea68b61a9e0f8b75613bfca13
SSDEEP

12288:zr0uzUAVWZOvAI4LsYs3WgEE+LkXB9gHSxa4qTFgqx:zN58ZKAI4LsYs3Wgl+LkXRa4qTFgM

Score

10^/10

Malware Config

Targets

- Target
  
  1e7d901906c37e2fd8807f5f8edcdae1_JaffaCakes118
- Size
  
  538KB
- MD5
  
  1e7d901906c37e2fd8807f5f8edcdae1
- SHA1
  
  739164b6ca685b7f0748b703c1fc2390d86351bb
- SHA256
  
  221f3998c5189acabd57e4c5a83e85bacf8f092ed32a2dcd671e07614b449149
- SHA512
  
  6c7eec8b97bc5dd92a35ed79de1915539314b71fc2c3bf3880beceb587de80c56f2ccac39cc80e3e57aff5243c07c1b7754a216ea68b61a9e0f8b75613bfca13
- SSDEEP
  
  12288:zr0uzUAVWZOvAI4LsYs3WgEE+LkXB9gHSxa4qTFgqx:zN58ZKAI4LsYs3Wgl+LkXRa4qTFgM
Score

10^/10

isrstealer spyware stealer trojan upx
- ISR Stealer
  ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
  trojan stealer isrstealer
- ISR Stealer payload
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1

T1552

Credentials In Files

1

T1552.001

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Data from Local System

1

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ISR Stealer

ISR Stealer payload

Executes dropped EXE

Loads dropped DLL

Reads user/profile data of web browsers

UPX packed file

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2