Overview

overview

10

Static

static

5

0f85ffb3e9...18.exe

windows7-x64

10

0f85ffb3e9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f85ffb3e96f5d3140a1274224dc045a_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241003-tjmfratfnk

  • MD5

    0f85ffb3e96f5d3140a1274224dc045a

  • SHA1

    9faf044221f1ae89b82e2ac6902a442e942837b0

  • SHA256

    99a1d6445f22f2466146061d6fbbd42e81bdd91c09a8a397d0c10efbf00c5d51

  • SHA512

    e46579d33499a5518ff9beb771baa3100546e3ab615e6a4afa3a8278de5fcbf196d01b5f5c8cb683296e34ffdfbd94a8aaf220d5a060eb0b43c2e5ecb4978390

  • SSDEEP

    24576:pRmJkcoQricOIQxiZY1iaT/NvDAFEpEMuoKqRSzRxAFyro1:mJZoQrbTFZY1iaTZEWpEMbBSzzAso1

Score
10/10
isrstealerdiscoverystealertrojanupx

Malware Config

Targets

    • Target

      0f85ffb3e96f5d3140a1274224dc045a_JaffaCakes118

    • Size

      1.0MB

    • MD5

      0f85ffb3e96f5d3140a1274224dc045a

    • SHA1

      9faf044221f1ae89b82e2ac6902a442e942837b0

    • SHA256

      99a1d6445f22f2466146061d6fbbd42e81bdd91c09a8a397d0c10efbf00c5d51

    • SHA512

      e46579d33499a5518ff9beb771baa3100546e3ab615e6a4afa3a8278de5fcbf196d01b5f5c8cb683296e34ffdfbd94a8aaf220d5a060eb0b43c2e5ecb4978390

    • SSDEEP

      24576:pRmJkcoQricOIQxiZY1iaT/NvDAFEpEMuoKqRSzRxAFyro1:mJZoQrbTFZY1iaTZEWpEMbBSzzAso1

    Score
    10/10
    isrstealerdiscoverystealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks