Overview

overview

10

Static

static

3

2944332d47...18.exe

windows7-x64

10

2944332d47...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2944332d4754e448152c2e5920af3d42_JaffaCakes118

  • Size

    412KB

  • Sample

    240706-xlyhkssfqa

  • MD5

    2944332d4754e448152c2e5920af3d42

  • SHA1

    f6b80400eb1e671ecb9737f12fefdc904ade8b08

  • SHA256

    2d3fe4f073a6502a68d82492dc5bb16cbf19bda9077f19691eb2e3bb332797f0

  • SHA512

    52df32e7887c050236debb4e233f71d7c1792d95cd74780381e1f67a3680dcb6cdede79c114ee2662651093252330d21cb81fa447b2fdbda4b86949b049e3087

  • SSDEEP

    6144:dcLf69bGgexE08A7DsCo5p7zs9xdNWcYRa6stpDgwCOo08cgoZ:dcLy9bGgVwyfsrWc0etpDg1fo

Score
10/10
isrstealerspywarestealertrojan

Malware Config

Targets

    • Target

      2944332d4754e448152c2e5920af3d42_JaffaCakes118

    • Size

      412KB

    • MD5

      2944332d4754e448152c2e5920af3d42

    • SHA1

      f6b80400eb1e671ecb9737f12fefdc904ade8b08

    • SHA256

      2d3fe4f073a6502a68d82492dc5bb16cbf19bda9077f19691eb2e3bb332797f0

    • SHA512

      52df32e7887c050236debb4e233f71d7c1792d95cd74780381e1f67a3680dcb6cdede79c114ee2662651093252330d21cb81fa447b2fdbda4b86949b049e3087

    • SSDEEP

      6144:dcLf69bGgexE08A7DsCo5p7zs9xdNWcYRa6stpDgwCOo08cgoZ:dcLy9bGgVwyfsrWc0etpDg1fo

    Score
    10/10
    isrstealerspywarestealertrojan

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks