Overview

overview

10

Static

static

Attached AWB.exe

windows7_x64

10

Attached AWB.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Attached AWB.exe

  • Size

    943KB

  • Sample

    200710-6fameefll6

  • MD5

    63ae3d497fc808ba1f4c5109d76c457f

  • SHA1

    6d7e6c8743f130c0a23551061516b47a9510729b

  • SHA256

    10939877f109569dff853eef9ddb462dda69871bc04b44d45d1a784a21a208ba

  • SHA512

    70ab3ea48525ffb2b5a354c46ae1684226d756855fd61859c705827b0c71cbefd88f5e5ce93cb720f0fe638b89b4b1a3736976798d6cbe0262c94b1effaf2ba5

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      Attached AWB.exe

    • Size

      943KB

    • MD5

      63ae3d497fc808ba1f4c5109d76c457f

    • SHA1

      6d7e6c8743f130c0a23551061516b47a9510729b

    • SHA256

      10939877f109569dff853eef9ddb462dda69871bc04b44d45d1a784a21a208ba

    • SHA512

      70ab3ea48525ffb2b5a354c46ae1684226d756855fd61859c705827b0c71cbefd88f5e5ce93cb720f0fe638b89b4b1a3736976798d6cbe0262c94b1effaf2ba5

    Score
    10/10
    spywarestealermasslogger

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger log file

      Detects a log file produced by MassLogger.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks