Overview

overview

10

Static

static

3

2388afa092...18.exe

windows7-x64

10

2388afa092...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2388afa092d38150f865c7f2ad428f1a_JaffaCakes118

  • Size

    227KB

  • Sample

    240703-yfjmxavdnq

  • MD5

    2388afa092d38150f865c7f2ad428f1a

  • SHA1

    5eea89dc6436292f1b2dcfc84e8316a9afa6acc7

  • SHA256

    9389c83538a42e9338c2eb00d46f349e48f825927bff1c21dcdc0eeaef486ed9

  • SHA512

    ec1378f0230dacd18a62f17e132caabd1ff0f469fbd0ade53c3ebefbb8051e89806a7bcafa26924789df7e778e882290bfc694320cab6af8617011d725b55120

  • SSDEEP

    3072:+Ida9stIsq3g8vz+KBAis7aMztIFr3HBpYU5jOJZ70DE2GF8NKU9ILswqG:dYsoqaS7fzKFr3HBaU5yZ7/2zNKUmsw

Score
10/10
isrstealerstealertrojan

Malware Config

Targets

    • Target

      2388afa092d38150f865c7f2ad428f1a_JaffaCakes118

    • Size

      227KB

    • MD5

      2388afa092d38150f865c7f2ad428f1a

    • SHA1

      5eea89dc6436292f1b2dcfc84e8316a9afa6acc7

    • SHA256

      9389c83538a42e9338c2eb00d46f349e48f825927bff1c21dcdc0eeaef486ed9

    • SHA512

      ec1378f0230dacd18a62f17e132caabd1ff0f469fbd0ade53c3ebefbb8051e89806a7bcafa26924789df7e778e882290bfc694320cab6af8617011d725b55120

    • SSDEEP

      3072:+Ida9stIsq3g8vz+KBAis7aMztIFr3HBpYU5jOJZ70DE2GF8NKU9ILswqG:dYsoqaS7fzKFr3HBaU5yZ7/2zNKUmsw

    Score
    10/10
    isrstealerstealertrojan

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks