Overview

overview

10

Static

static

3

4094058047...18.exe

windows7-x64

10

4094058047...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4094058047f8effdacd903a2151add4d_JaffaCakes118

  • Size

    348KB

  • Sample

    240713-hdq17szdqj

  • MD5

    4094058047f8effdacd903a2151add4d

  • SHA1

    dabe91c6dadf979752cf6932d6ee3648f7385046

  • SHA256

    183de1052efc79d111da426e80685ba561042c7e3d3d86ec97efec66a0e4205b

  • SHA512

    9a6e4b74cc0dcbbc9857f62ac2876a8d327754404cf09ddb7737ebf87edbfb3d4e740e4b20090afe1aeeb304398780f7fe450133f43936db0d22b924c0030979

  • SSDEEP

    3072:8h+TCYEODORUGmMgOvON8lm4doscIGw0LxWDdCxkknIeQ13UYcbKDmVywyLXKao8:sI8sKiw0M13UdmmVyr6jnE

Score
10/10
isrstealerstealertrojan

Malware Config

Targets

    • Target

      4094058047f8effdacd903a2151add4d_JaffaCakes118

    • Size

      348KB

    • MD5

      4094058047f8effdacd903a2151add4d

    • SHA1

      dabe91c6dadf979752cf6932d6ee3648f7385046

    • SHA256

      183de1052efc79d111da426e80685ba561042c7e3d3d86ec97efec66a0e4205b

    • SHA512

      9a6e4b74cc0dcbbc9857f62ac2876a8d327754404cf09ddb7737ebf87edbfb3d4e740e4b20090afe1aeeb304398780f7fe450133f43936db0d22b924c0030979

    • SSDEEP

      3072:8h+TCYEODORUGmMgOvON8lm4doscIGw0LxWDdCxkknIeQ13UYcbKDmVywyLXKao8:sI8sKiw0M13UdmmVyr6jnE

    Score
    10/10
    isrstealerstealertrojan

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks