Overview

overview

10

Static

static

3

33a786104d...18.exe

windows7-x64

10

33a786104d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33a786104d5e3b82458985ccaadea765_JaffaCakes118

  • Size

    255KB

  • Sample

    240710-g85bmssapl

  • MD5

    33a786104d5e3b82458985ccaadea765

  • SHA1

    aa5799c26f8815df3bda581c4415bd92fcfaed5c

  • SHA256

    3c34b05fb21dc3b7d281c5f528776b695edf7b58f3f84240073c8939f92c2032

  • SHA512

    6adf8c52e2eed7427cf5c3a076f1ecd921e6fe055b37629e5d4deac406223dfde75ba8679eccc74146239564ebca9a52cd08488db70cc260431719ca17a450d9

  • SSDEEP

    6144:A+8r3DavvgYgH4howWXXp3u4q/L0PmwlYcGdwsNWd41o:fOOvvgQowqXp30wmw5Gta4

Score
10/10
isrstealerstealertrojan

Malware Config

Targets

    • Target

      33a786104d5e3b82458985ccaadea765_JaffaCakes118

    • Size

      255KB

    • MD5

      33a786104d5e3b82458985ccaadea765

    • SHA1

      aa5799c26f8815df3bda581c4415bd92fcfaed5c

    • SHA256

      3c34b05fb21dc3b7d281c5f528776b695edf7b58f3f84240073c8939f92c2032

    • SHA512

      6adf8c52e2eed7427cf5c3a076f1ecd921e6fe055b37629e5d4deac406223dfde75ba8679eccc74146239564ebca9a52cd08488db70cc260431719ca17a450d9

    • SSDEEP

      6144:A+8r3DavvgYgH4howWXXp3u4q/L0PmwlYcGdwsNWd41o:fOOvvgQowqXp30wmw5Gta4

    Score
    10/10
    isrstealerstealertrojan

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks