General
-
Target
0QSzXhS7MbCQTXC.exe
-
Size
1.1MB
-
Sample
200709-gqjpcx6mhe
-
MD5
4ed163913c77b6c20e55d35e34133b1b
-
SHA1
ae9334de8094ce58d3719a5de1fa75edda5649a0
-
SHA256
79d97d58dbb9845b2101ad4a03a987b9fc8e937e43b4b9f5bfe3a47f71a6f113
-
SHA512
f5389e60abf73f30c95c66abb2a1a736a8c9c0af959b73daf34fb1736989a324c88876c74aed57732bc89dd2886b4f400d09fad24192028a34dcf53aeeae697e
Static task
static1
Behavioral task
behavioral1
Sample
0QSzXhS7MbCQTXC.exe
Resource
win7v200430
Behavioral task
behavioral2
Sample
0QSzXhS7MbCQTXC.exe
Resource
win10
Malware Config
Targets
-
-
Target
0QSzXhS7MbCQTXC.exe
-
Size
1.1MB
-
MD5
4ed163913c77b6c20e55d35e34133b1b
-
SHA1
ae9334de8094ce58d3719a5de1fa75edda5649a0
-
SHA256
79d97d58dbb9845b2101ad4a03a987b9fc8e937e43b4b9f5bfe3a47f71a6f113
-
SHA512
f5389e60abf73f30c95c66abb2a1a736a8c9c0af959b73daf34fb1736989a324c88876c74aed57732bc89dd2886b4f400d09fad24192028a34dcf53aeeae697e
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger log file
Detects a log file produced by MassLogger.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-