Overview

overview

10

Static

static

5

4c4ed1cd16...18.exe

windows7-x64

10

4c4ed1cd16...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c4ed1cd162b5d91926cae606b66d489_JaffaCakes118

  • Size

    519KB

  • Sample

    241016-lqbzlaxgjm

  • MD5

    4c4ed1cd162b5d91926cae606b66d489

  • SHA1

    0045d9832e535e74419c131b2338bd43bdb14042

  • SHA256

    be62d9b011b6d7aa0f1581bb815014e0b6c311d1402b27e8360c5e3a76158ae6

  • SHA512

    20fb85f2ec8f46970dac5055afc3e3e6b9e6795f339293f9dba608f42b7bd45a622bde33112ab8153891b7173387a33858a605015ff1807b9b363b6b217dc448

  • SSDEEP

    12288:Sg22uRdmOOJozR2k2VGd1LuJcZAeuTA4e+uia62oO3REbpc4Q3Z:SgbuPmtJozsk2ViYmZAeuTLTul62Fp

Score
10/10
isrstealerdiscoveryspywarestealertrojanupx

Malware Config

Targets

    • Target

      4c4ed1cd162b5d91926cae606b66d489_JaffaCakes118

    • Size

      519KB

    • MD5

      4c4ed1cd162b5d91926cae606b66d489

    • SHA1

      0045d9832e535e74419c131b2338bd43bdb14042

    • SHA256

      be62d9b011b6d7aa0f1581bb815014e0b6c311d1402b27e8360c5e3a76158ae6

    • SHA512

      20fb85f2ec8f46970dac5055afc3e3e6b9e6795f339293f9dba608f42b7bd45a622bde33112ab8153891b7173387a33858a605015ff1807b9b363b6b217dc448

    • SSDEEP

      12288:Sg22uRdmOOJozR2k2VGd1LuJcZAeuTA4e+uia62oO3REbpc4Q3Z:SgbuPmtJozsk2ViYmZAeuTLTul62Fp

    Score
    10/10
    isrstealerdiscoveryspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks