Extracted

• • Target
    MvZy9A27CiSqZpp.exe
  • Size 1.3MB
  • SHA256 d03792e976baeea6547686ff0fe4ced755f9bad76ee6e3ff3c5f4adf93cbb0f8
  • MD5 097e02a7620118b5a0571ec84b5e3e30
  • SHA1 46c38e2a5377b936739b1562e876fb37878629ff
  • SHA512 11b806fe2c544487172ba7190d5d2ad5d49dffe402844810ddb417b5cb27f79b6c82421f6252a67a8dac7f642efda469dffe307f682f35ef413aaa08c7b155af
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarestealermasslogger

  • MassLogger

    Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    stealerspywaremasslogger

  • MassLogger Main Payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2