Overview

overview

10

Static

static

5

2cd0ec6924...18.exe

windows7-x64

10

2cd0ec6924...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cd0ec69248cba965d577bcdb0f3b52e_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241009-hqgy3a1crm

  • MD5

    2cd0ec69248cba965d577bcdb0f3b52e

  • SHA1

    2ff37c13484794a3ed7ad4c3c2b26869b8c998b9

  • SHA256

    bd2563ad574ea93560cff3cad5c40c266c4c59f214d3f0420d6ea264914828b9

  • SHA512

    d375e9c2d2f7c058dc4431ee4d4f845d53fa408c58abf5280e9e514db40ad5d9a5ec773074123253e7d2b7b49a03d4a33979d4ae8c375c7599cfb7ed51e7ad2d

  • SSDEEP

    24576:KaHMv6Corjqny/Q5NSsWSyB0UPeS1GsGJPzSqpD7du:K1vqjd/Q5IrSSeEGzP+uPdu

Score
10/10
isrstealerdiscoveryspywarestealertrojanupx

Malware Config

Targets

    • Target

      2cd0ec69248cba965d577bcdb0f3b52e_JaffaCakes118

    • Size

      1.1MB

    • MD5

      2cd0ec69248cba965d577bcdb0f3b52e

    • SHA1

      2ff37c13484794a3ed7ad4c3c2b26869b8c998b9

    • SHA256

      bd2563ad574ea93560cff3cad5c40c266c4c59f214d3f0420d6ea264914828b9

    • SHA512

      d375e9c2d2f7c058dc4431ee4d4f845d53fa408c58abf5280e9e514db40ad5d9a5ec773074123253e7d2b7b49a03d4a33979d4ae8c375c7599cfb7ed51e7ad2d

    • SSDEEP

      24576:KaHMv6Corjqny/Q5NSsWSyB0UPeS1GsGJPzSqpD7du:K1vqjd/Q5IrSSeEGzP+uPdu

    Score
    10/10
    isrstealerdiscoveryspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks