Overview

overview

10

Static

static

10ZYpleV7XW12Qh.exe

windows7_x64

10

10ZYpleV7XW12Qh.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10ZYpleV7XW12Qh.exe

  • Size

    1.1MB

  • Sample

    200714-e9nvns5qge

  • MD5

    ca9cd6a5da6c838ae42b7fb8b0e66462

  • SHA1

    1f48422dc91327ac3a2f5a4e770c4a3406037dca

  • SHA256

    eaf233924580f52342e12c63fd6a33ec5db002b85a20b26a3e7534147d292bc5

  • SHA512

    9ab9fed49a60f1f5801176b66db4ca45a8f1dee92b6fcd86462e2fdadaa703a32cbf16e49d4f97348c7e406fe30723c3409bc0cd750e90362747ebbfb76c4da3

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      10ZYpleV7XW12Qh.exe

    • Size

      1.1MB

    • MD5

      ca9cd6a5da6c838ae42b7fb8b0e66462

    • SHA1

      1f48422dc91327ac3a2f5a4e770c4a3406037dca

    • SHA256

      eaf233924580f52342e12c63fd6a33ec5db002b85a20b26a3e7534147d292bc5

    • SHA512

      9ab9fed49a60f1f5801176b66db4ca45a8f1dee92b6fcd86462e2fdadaa703a32cbf16e49d4f97348c7e406fe30723c3409bc0cd750e90362747ebbfb76c4da3

    Score
    10/10
    spywarestealermasslogger

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger log file

      Detects a log file produced by MassLogger.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks