General
- Target PAYMENT DETAILS CONFIRMATION.exe
- Size 992KB
- Sample200917-pfb7k8esz2
- SHA256 ad32cadc3a75e969c0e8c25dfec398378aceb406017050763ce3c5d482998f42
Score
10/10
Malware Config
Targets
-
- Target PAYMENT DETAILS CONFIRMATION.exe
- Size 992KB
- SHA256 ad32cadc3a75e969c0e8c25dfec398378aceb406017050763ce3c5d482998f42
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger Main Payload
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext