isrstealer | cc94e513464e869cef5da4aa050de54fd8afaa879ea1ba545ac0a9a83e630a8c

General

Target

JaffaCakes118_235138719883429e805b3fd05310326a
Size

329KB
Sample

250226-baz2daxrz3
MD5

235138719883429e805b3fd05310326a
SHA1

341de6cf3a38d8fe9cf1a1f3896d8741a83bf1ff
SHA256

cc94e513464e869cef5da4aa050de54fd8afaa879ea1ba545ac0a9a83e630a8c
SHA512

79925b81fab713cffd9e9609f4b7737f1d7b27e9240d8d788483e223b5b20d8b9837c1737708f702b4830b3dc06055aa25d24026b0cdf7197459af9fdd2baaa3
SSDEEP

6144:K4eZA+tMPSkR8Zbd+z6oxVr/d6bVdNKfiH/Og++H6oMdMYTyalG4:K4eZA+tMPSxZbd46GlmTOg++HKKYl

Score

10^/10

Malware Config

Targets

- Target
  
  JaffaCakes118_235138719883429e805b3fd05310326a
- Size
  
  329KB
- MD5
  
  235138719883429e805b3fd05310326a
- SHA1
  
  341de6cf3a38d8fe9cf1a1f3896d8741a83bf1ff
- SHA256
  
  cc94e513464e869cef5da4aa050de54fd8afaa879ea1ba545ac0a9a83e630a8c
- SHA512
  
  79925b81fab713cffd9e9609f4b7737f1d7b27e9240d8d788483e223b5b20d8b9837c1737708f702b4830b3dc06055aa25d24026b0cdf7197459af9fdd2baaa3
- SSDEEP
  
  6144:K4eZA+tMPSkR8Zbd+z6oxVr/d6bVdNKfiH/Og++H6oMdMYTyalG4:K4eZA+tMPSxZbd46GlmTOg++HKKYl
Score

10^/10

isrstealer collection discovery stealer trojan upx
- ISR Stealer
  ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
  trojan stealer isrstealer
- ISR Stealer payload
- Isrstealer family
  isrstealer
- Detected Nirsoft tools
  Free utilities often used by attackers which can steal passwords, product keys, etc.
- NirSoft MailPassView
  Password recovery tool for various email clients
- Accesses Microsoft Outlook accounts
  collection
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Email Collection

1

T1114

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ISR Stealer

ISR Stealer payload

Isrstealer family

Detected Nirsoft tools

NirSoft MailPassView

Accesses Microsoft Outlook accounts

Suspicious use of SetThreadContext

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2