Overview

overview

10

Static

static

3

d90bbe81e8...18.exe

windows7-x64

10

d90bbe81e8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d90bbe81e8277372dd8f439c10ee002f_JaffaCakes118

  • Size

    804KB

  • Sample

    241209-lxr96aymel

  • MD5

    d90bbe81e8277372dd8f439c10ee002f

  • SHA1

    c22e4adddfa8d839ed658c1b2e7ec309ff71ce0a

  • SHA256

    e637aeeaa0c455e667d5e6e7ddd8f9f8571821ac11610f64227ffe63b067426e

  • SHA512

    0b90546e59817c72f8e98f74342aceb3202c167913dadd437f5eb2070b19e0d1e66f7a003669faa943b9af937f816ab4466ff814a14ccf9b9720c04de860268b

  • SSDEEP

    12288:src9HR5bVMIiAIkAQBpslCeBQO59JNvzsy63NPXx/fZ:s+HvRMIjcQB814yeNz

Score
10/10
isrstealerdiscoveryspywarestealertrojanupx

Malware Config

Targets

    • Target

      d90bbe81e8277372dd8f439c10ee002f_JaffaCakes118

    • Size

      804KB

    • MD5

      d90bbe81e8277372dd8f439c10ee002f

    • SHA1

      c22e4adddfa8d839ed658c1b2e7ec309ff71ce0a

    • SHA256

      e637aeeaa0c455e667d5e6e7ddd8f9f8571821ac11610f64227ffe63b067426e

    • SHA512

      0b90546e59817c72f8e98f74342aceb3202c167913dadd437f5eb2070b19e0d1e66f7a003669faa943b9af937f816ab4466ff814a14ccf9b9720c04de860268b

    • SSDEEP

      12288:src9HR5bVMIiAIkAQBpslCeBQO59JNvzsy63NPXx/fZ:s+HvRMIjcQB814yeNz

    Score
    10/10
    isrstealerdiscoveryspywarestealertrojanupx

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Isrstealer family

      isrstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks