Overview

overview

10

Static

static

3

352e6e5d52...18.exe

windows7-x64

10

352e6e5d52...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    352e6e5d52130b67fa5a58d4d4de14c5_JaffaCakes118

  • Size

    351KB

  • Sample

    241011-rdd63swcmc

  • MD5

    352e6e5d52130b67fa5a58d4d4de14c5

  • SHA1

    b171277907865a1f7e62823fe9cad28e7b019add

  • SHA256

    563febfffb3cb85a8f5c364cb915c20bf9599b1b7d9685a6fc5e45956118a229

  • SHA512

    040ea7f3d220bc376900d6441539a1898d1ea7e209b5a8d18615ad0a16b1f13067f90088c10ff697527e48c70720df9c31211999b4b1277a153a09edf5010177

  • SSDEEP

    6144:/xL3BJyWDLDvsUw8GEP3HgN2cQcKo9GeBruKC7CIeb3XkS5s724M:Zrasvv1P3Au5o9GeMb7K7Xk04

Score
10/10
isrstealerdiscoveryspywarestealertrojanupx

Malware Config

Targets

    • Target

      352e6e5d52130b67fa5a58d4d4de14c5_JaffaCakes118

    • Size

      351KB

    • MD5

      352e6e5d52130b67fa5a58d4d4de14c5

    • SHA1

      b171277907865a1f7e62823fe9cad28e7b019add

    • SHA256

      563febfffb3cb85a8f5c364cb915c20bf9599b1b7d9685a6fc5e45956118a229

    • SHA512

      040ea7f3d220bc376900d6441539a1898d1ea7e209b5a8d18615ad0a16b1f13067f90088c10ff697527e48c70720df9c31211999b4b1277a153a09edf5010177

    • SSDEEP

      6144:/xL3BJyWDLDvsUw8GEP3HgN2cQcKo9GeBruKC7CIeb3XkS5s724M:Zrasvv1P3Au5o9GeMb7K7Xk04

    Score
    10/10
    isrstealerdiscoveryspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks