Overview

overview

10

Static

static

5

dbb411b31c...18.exe

windows7-x64

10

dbb411b31c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbb411b31c2f2beb3cf20e5f428c6100_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241209-1p2wyssnev

  • MD5

    dbb411b31c2f2beb3cf20e5f428c6100

  • SHA1

    4d61b3d4bf11f05b05f55f6014056f6c6b28dab1

  • SHA256

    bb64e688ed77464721aed2f6ccf8a730d5cdd5ae6bb2884e9d3ee46ae41fcdad

  • SHA512

    d5120df6db4dce07b37c15c405e156507bf8b08e3013f939741d1a6af63b7c51cc6923981b1973961b3a2e86dc736565cfdeb33bb27654da717682bba8c46f2a

  • SSDEEP

    24576:BRmJkcoQricOIQxiZY1WN9G4aEMuoKqWlOAXzxaA:uJZoQrbTFZY1WN9G4aEMbgOADkA

Score
10/10
isrstealerdiscoverystealertrojanupx

Malware Config

Targets

    • Target

      dbb411b31c2f2beb3cf20e5f428c6100_JaffaCakes118

    • Size

      1.2MB

    • MD5

      dbb411b31c2f2beb3cf20e5f428c6100

    • SHA1

      4d61b3d4bf11f05b05f55f6014056f6c6b28dab1

    • SHA256

      bb64e688ed77464721aed2f6ccf8a730d5cdd5ae6bb2884e9d3ee46ae41fcdad

    • SHA512

      d5120df6db4dce07b37c15c405e156507bf8b08e3013f939741d1a6af63b7c51cc6923981b1973961b3a2e86dc736565cfdeb33bb27654da717682bba8c46f2a

    • SSDEEP

      24576:BRmJkcoQricOIQxiZY1WN9G4aEMuoKqWlOAXzxaA:uJZoQrbTFZY1WN9G4aEMbgOADkA

    Score
    10/10
    isrstealerdiscoverystealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Isrstealer family

      isrstealer

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks