Extracted

Extracted

• • Target
    KITHIRA ship's Particulas.exe
  • Size 1023KB
  • SHA256 be978699739f217bd2d71f769d8f16ba1a90c519fd10f19475d4e040f9e7c05c
  • MD5 c7a25dd71c4450cb3d6e823c7c690573
  • SHA1 5a5fbb3ac57456755efe85ec717e2f07e9063ef4
  • SHA512 accfa7c7a2f8829cc011eed348882b3ab88b95561c8f36a25557fbf7f1d6b0ef8767e66fe9d4f1ef6cd6cbb2a828c602bc852545b0fa1480e78cfe2d41ef6edc
  • MD5 SHA1 SHA512

  Score

  10^/10

  massloggerspywarestealer

  • MassLogger

    Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    stealerspywaremasslogger

  • MassLogger Main Payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2