Extracted

• • Target
    AMSONS BROCHURE.pif
  • Size 542KB
  • SHA256 4e59193170ad7a1da7d91bea0028bb8107a3a305cd91a353822e23924ceda25b
  • MD5 36b2c67a3f05c5cee99aeac1a1fe577e
  • SHA1 95224949b0bce614207e39eb20f8482f130227e1
  • SHA512 d70c4f37fb50ec37f125a5afa6ea01d32f46cb1747181ccee49a363e2eab583571291d082fcf8fc87ed6b18d5e32f4f31d33754b12a924314a54c0d361dffe82
  • MD5 SHA1 SHA512

  Score

  10^/10

  m00nd3v_loggerspywarestealer

  • M00nd3v_Logger

    M00nd3v Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

    stealerspywarem00nd3v_logger

  • M00nD3v Logger Payload

    Detects M00nD3v Logger payload in memory.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2