General
- Target PAYMENT DETAILS CONFIRMATION.exe
- Size 992KB
- Sample200917-pfb7k8esz2
- SHA256 ad32cadc3a75e969c0e8c25dfec398378aceb406017050763ce3c5d482998f42
Score
10/10
Malware Config
Targets
-
- Target PAYMENT DETAILS CONFIRMATION.exe
- Size 992KB
- SHA256 ad32cadc3a75e969c0e8c25dfec398378aceb406017050763ce3c5d482998f42
Score10/10MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
MassLogger Main Payload
Looks for VirtualBox Guest Additions in registry
Looks for VMWare Tools registry key
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
Suspicious use of SetThreadContext