General

  • Target

    b8e05d10f5bde741fbfe023fda66daed_JaffaCakes118

  • Size

    170KB

  • Sample

    240822-yb2mxswhnq

  • MD5

    b8e05d10f5bde741fbfe023fda66daed

  • SHA1

    0634e31e52566045e0fe26002914ab7e09019930

  • SHA256

    9d854d9944e219935d898fa6a41aef9bd3768e73d884d7b72dad23115362bc48

  • SHA512

    9720c40e51749f7a872142d65337e9cecfaea484bfd10b93e6dccf93f00dcf38f5e9bff79dbaa56595c276eb86b6e28b4d9a7e2af5711258c595bf3225bcfd0a

  • SSDEEP

    3072:Zs6wqv1IJr8Aa4scq3g3bY0cQj4iF8dq3F7GZ+2bAYPLr4PVBS:668/AWD3FyZ5A1V

Malware Config

Targets

    • Target

      b8e05d10f5bde741fbfe023fda66daed_JaffaCakes118

    • Size

      170KB

    • MD5

      b8e05d10f5bde741fbfe023fda66daed

    • SHA1

      0634e31e52566045e0fe26002914ab7e09019930

    • SHA256

      9d854d9944e219935d898fa6a41aef9bd3768e73d884d7b72dad23115362bc48

    • SHA512

      9720c40e51749f7a872142d65337e9cecfaea484bfd10b93e6dccf93f00dcf38f5e9bff79dbaa56595c276eb86b6e28b4d9a7e2af5711258c595bf3225bcfd0a

    • SSDEEP

      3072:Zs6wqv1IJr8Aa4scq3g3bY0cQj4iF8dq3F7GZ+2bAYPLr4PVBS:668/AWD3FyZ5A1V

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

    • ISR Stealer payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks