Overview

overview

10

Static

static

script.js

windows7_x64

10

script.js

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    script.js

  • Size

    2KB

  • Sample

    210112-k7wbqmfpwx

  • MD5

    e6a97d295d68915f0b716c6e7c6cf1b3

  • SHA1

    2affefd7bbf4cf826568f22635a247ca62f27f30

  • SHA256

    9bd9d73577b5a9fe76184efcb1e84cbed087a7e5892a2a2b9fd0d5d1c54b33b1

  • SHA512

    2c6144389dbd6b7baac3edeebe47691ea7c4950bab42882b673662615fd04bff7bee1f7ae97573c9d7b12ccb70910ccd5832cab15a7523b92ea45bb811e902fb

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      script.js

    • Size

      2KB

    • MD5

      e6a97d295d68915f0b716c6e7c6cf1b3

    • SHA1

      2affefd7bbf4cf826568f22635a247ca62f27f30

    • SHA256

      9bd9d73577b5a9fe76184efcb1e84cbed087a7e5892a2a2b9fd0d5d1c54b33b1

    • SHA512

      2c6144389dbd6b7baac3edeebe47691ea7c4950bab42882b673662615fd04bff7bee1f7ae97573c9d7b12ccb70910ccd5832cab15a7523b92ea45bb811e902fb

    Score
    10/10
    massloggerspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Blocklisted process makes network request

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks