Overview

overview

10

Static

static

3

222386d52d...18.exe

windows7-x64

10

222386d52d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    222386d52df00ece988740b592c4d035_JaffaCakes118

  • Size

    225KB

  • Sample

    240703-m6kgcatcpp

  • MD5

    222386d52df00ece988740b592c4d035

  • SHA1

    3f54f12c9d0c5cbdee07d44638845224bd0ba80a

  • SHA256

    c970ead0023376ae7d13d55f16e7242b04efce55ddb923acece5ef254f2b3492

  • SHA512

    ab28b3af691b7f716669159d11d0eeaeeba58effa605901023ae860cbd64ad06dff77691d0450debe8b4b08d85f6a10c84730b929b6c7c1d085acb38582bc887

  • SSDEEP

    6144:KlaAyIAWVT/c770ecOaCKWHVBwF8I8cUHI+3XIfwPG:KASTVbc770C/KWAFT8c0HOw

Score
10/10
isrstealerpersistencestealertrojan

Malware Config

Targets

    • Target

      222386d52df00ece988740b592c4d035_JaffaCakes118

    • Size

      225KB

    • MD5

      222386d52df00ece988740b592c4d035

    • SHA1

      3f54f12c9d0c5cbdee07d44638845224bd0ba80a

    • SHA256

      c970ead0023376ae7d13d55f16e7242b04efce55ddb923acece5ef254f2b3492

    • SHA512

      ab28b3af691b7f716669159d11d0eeaeeba58effa605901023ae860cbd64ad06dff77691d0450debe8b4b08d85f6a10c84730b929b6c7c1d085acb38582bc887

    • SSDEEP

      6144:KlaAyIAWVT/c770ecOaCKWHVBwF8I8cUHI+3XIfwPG:KASTVbc770C/KWAFT8c0HOw

    Score
    10/10
    isrstealerpersistencestealertrojan

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks