Overview

overview

10

Static

static

Standard (... - W7)

windows7_x64

10

Resubmissions

24/11/2020, 07:19

201124-c593vq5fxe10

24/11/2020, 06:34

201124-ndm4s5wh1j10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Machine_Specification.img
  • Size 1.2MB
  • Sample201124-c593vq5fxe
  • SHA256 fe58f1f1a965f99d61358250dba7792b77c805312677074209c9641fb8e3265a
  • MD5 SHA1 SHA512
Score
10/10
massloggerpersistencespywarestealer

Malware Config

Targets

    • Target
      QUOTATIO.EXE
    • Size 669KB
    • SHA256 bd0f0e3a4eae909e89bd8134013b914a9279a39ac7ce8fc12d073cd821d60659
    • MD5 SHA1 SHA512
    Score
    10/10
    massloggerpersistencespywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks