Extracted

• • Target
    TT final copy.pif
  • Size 543KB
  • SHA256 170914b423f415bdf562a5ee3eff48808d4b0731013bcdf870bfdf2bcded8caa
  • MD5 29552f1095636a883593205bd1e14ec1
  • SHA1 2915efef117abb7ddcbd329038e76ebf87f9605a
  • SHA512 e68015d79a506523b2c45bcbd9d58a24b6f76badbeab0a41482c2fe7c32d32a0e2bb77a573f855547d443584377fa042dad9f0a395090ef3c5aee8e9055fe365
  • MD5 SHA1 SHA512

  Score

  10^/10

  m00nd3v_loggerspywarestealer

  • M00nd3v_Logger

    M00nd3v Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

    stealerspywarem00nd3v_logger

  • M00nD3v Logger Payload

    Detects M00nD3v Logger payload in memory.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2