B3gkHhPlWv3DOsB.exe

General
Target

B3gkHhPlWv3DOsB.exe

Filesize

845KB

Completed

16-06-2020 20:53

Score
10 /10
MD5

35a5963bfb1fa8b5e3851378959ac522

SHA1

b1c035b8221c06e14311eda738df7e28a6559514

SHA256

77b7fa89c446b127b0c1d8ad0c5dc5fb57c8121dd3c40a67b77e5c0a35d75114

Malware Config

Extracted

Path C:\Users\Admin\AppData\Local\Temp\E2C1E8F1FA\Log.txt
Family masslogger
Ransom Note
################################################################# MassLogger v1.3.7.1 ################################################################# ### Logger Details ### User Name: Admin IP: 154.61.71.51 Location: United States Windows OS: Microsoft Windows 7 Professional 64bit Windows Serial Key: HYF8J-CVRMY-CM74G-RPHKF-PW487 CPU: Persocon Processor 2.5+ GPU: Standard VGA Graphics Adapter AV: NA Screen Resolution: 1280x720 Current Time: 6/16/2020 8:52:55 PM MassLogger Started: 6/16/2020 8:52:49 PM Interval: 2 hour MassLogger Process: C:\Users\Admin\AppData\Local\Temp\B3gkHhPlWv3DOsB.exe MassLogger Melt: false MassLogger Exit after delivery: false As Administrator: True Processes:
Signatures

Filter: None

    Processes
    Network
    Replay Monitor
    00:00 00:00
    Downloads
    • C:\Users\Admin\AppData\Local\Temp\tmp730.tmp

    • memory/900-1-0x0000000000000000-0x0000000000000000-disk.dmp

    • memory/1384-3-0x0000000000400000-0x00000000004A8000-memory.dmp

    • memory/1384-5-0x0000000000400000-0x00000000004A8000-memory.dmp

    • memory/1384-4-0x0000000000400000-0x00000000004A8000-memory.dmp