General
-
Target
IWZQ4WsDqXVYODCZNbcU_LAdryJz_XrwsziHAAKJyGI.bin
-
Size
1.1MB
-
Sample
201203-5arwq8bby2
-
MD5
3622e05ed8fed75a31eae667a21e4050
-
SHA1
61d86df4b3d5d0e2905a79fa318dcbcbf39b5bfa
-
SHA256
216650e16b03a9755838309935b714f8b01daf2273f97af0b33887000289c862
-
SHA512
9b70a519c804a13fb434fdca1f47ad3c1ef2263dea0eb1e8d2b3a3cd0914946a155a23a3fa7e7b4ed72451774dd9ce65f931236de5d1c8161a29eaec4f2383e6
Static task
static1
Behavioral task
behavioral1
Sample
IWZQ4WsDqXVYODCZNbcU_LAdryJz_XrwsziHAAKJyGI.bin.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
IWZQ4WsDqXVYODCZNbcU_LAdryJz_XrwsziHAAKJyGI.bin.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
IWZQ4WsDqXVYODCZNbcU_LAdryJz_XrwsziHAAKJyGI.bin
-
Size
1.1MB
-
MD5
3622e05ed8fed75a31eae667a21e4050
-
SHA1
61d86df4b3d5d0e2905a79fa318dcbcbf39b5bfa
-
SHA256
216650e16b03a9755838309935b714f8b01daf2273f97af0b33887000289c862
-
SHA512
9b70a519c804a13fb434fdca1f47ad3c1ef2263dea0eb1e8d2b3a3cd0914946a155a23a3fa7e7b4ed72451774dd9ce65f931236de5d1c8161a29eaec4f2383e6
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger Main Payload
-
ServiceHost packer
Detects ServiceHost packer used for .NET malware
-
Suspicious use of SetThreadContext
-