Overview

overview

10

Static

static

3

5951ee18b4...18.exe

windows7-x64

10

5951ee18b4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5951ee18b4eb276d7134bbda1cfe0c37_JaffaCakes118

  • Size

    248KB

  • Sample

    240718-2a4bxasend

  • MD5

    5951ee18b4eb276d7134bbda1cfe0c37

  • SHA1

    518ab82d49fef9320c5738caf17e64b264050e57

  • SHA256

    6773f95547c8f842bde7b0ff25864030d1fada8ca8f4bafaa419f964252203ff

  • SHA512

    bcdacc6b1330e32d22c901caffe9e044426e7027b25e01b5f630d9ce39bd63d8c64b33d9d09af99f223d738d6c7b16f65dfe1a25eaeb394a066eb691a6ef671b

  • SSDEEP

    6144:lugCa9IcDPCpHasBXMDsAXNb1t3CscgPfhkrhwR4UmW:r9jDaAsBiVbSvwfOrhwRr

Score
10/10
isrstealerspywarestealertrojanupx

Malware Config

Targets

    • Target

      5951ee18b4eb276d7134bbda1cfe0c37_JaffaCakes118

    • Size

      248KB

    • MD5

      5951ee18b4eb276d7134bbda1cfe0c37

    • SHA1

      518ab82d49fef9320c5738caf17e64b264050e57

    • SHA256

      6773f95547c8f842bde7b0ff25864030d1fada8ca8f4bafaa419f964252203ff

    • SHA512

      bcdacc6b1330e32d22c901caffe9e044426e7027b25e01b5f630d9ce39bd63d8c64b33d9d09af99f223d738d6c7b16f65dfe1a25eaeb394a066eb691a6ef671b

    • SSDEEP

      6144:lugCa9IcDPCpHasBXMDsAXNb1t3CscgPfhkrhwR4UmW:r9jDaAsBiVbSvwfOrhwRr

    Score
    10/10
    isrstealerspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks