General
- Target LIST OF PRODUCTS NEEDED.exe
- Size 1.1MB
- Sample201118-9cdmjv3e9n
- SHA256 e97151ce51e9463bd45ad41571141614fc0ffc8a8cbf2c74f36c20028a769f41
- MD5 af517807c4b6160d07314ba228f333de
- SHA1 9020081ebc00595e57d5d40a742682f4de0b7671
- SHA512 8647a9336ff7e33b60c7f9903d9214de5842bc195f4460870f9dda8205397ef9aaddf0a371ceb90b280e9b26017e53e0c10422844ce0f30fda14b7dccc310b00
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
LIST OF PRODUCTS NEEDED.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
LIST OF PRODUCTS NEEDED.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target LIST OF PRODUCTS NEEDED.exe
- Size 1.1MB
- SHA256 e97151ce51e9463bd45ad41571141614fc0ffc8a8cbf2c74f36c20028a769f41
- MD5 af517807c4b6160d07314ba228f333de
- SHA1 9020081ebc00595e57d5d40a742682f4de0b7671
- SHA512 8647a9336ff7e33b60c7f9903d9214de5842bc195f4460870f9dda8205397ef9aaddf0a371ceb90b280e9b26017e53e0c10422844ce0f30fda14b7dccc310b00
- MD5 SHA1 SHA512
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger Main Payload
-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Suspicious use of SetThreadContext