masslogger | 5f79465316d9ae31e09fd43bee417e4080627e20321ff9958fa78ca57a743a9c

General

Target
5f79465316d9ae31e09fd43bee417e4080627e20321ff9958fa78ca57a743a9c
Size 561KB
Sample220221-1962eacbek
SHA256 5f79465316d9ae31e09fd43bee417e4080627e20321ff9958fa78ca57a743a9c
MD5 f2617dcab45522e46b06e635323d123f
SHA1 048b3d7de64a1b60716bbe00474d5b5f2004479a
SHA512 6f2a66c02e88df8a8f41313d41b2b4b61691356ff3a684335eee6196df5f8e52f6e689b31b687d364e3fdc692b478480db9cf84c20201f2e6324e2e8a9b9c547
SSDEEP 12288:oh+cwA0dv9TEukj4HL+CgdSs0jEnBUcVW0gDIdXQjsvcmJbjw:ozqvJEmHL+1dIcZ0RIdRcSw
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

masslogger

Malware Config

Signatures

MassLogger Main Payload 1 IoCs

resource	yara_rule
static1/unpack001/Hesap bildirimi.exe	family_masslogger

Masslogger family
masslogger

File Explorer

5f79465316d9ae31e09fd43bee417e4080627e20321ff9958fa78ca57a743a9c

.zip 561KB
Hesap bildirimi.exe

.exe 680KB

5f79465316d9ae31e09fd43bee417e4080627e20321ff9958fa78ca57a743a9c

SHA256 5f79465316d9ae31e09fd43bee417e4080627e20321ff9958fa78ca57a743a9c
MD5 f2617dcab45522e46b06e635323d123f
SHA1 048b3d7de64a1b60716bbe00474d5b5f2004479a
SHA512 6f2a66c02e88df8a8f41313d41b2b4b61691356ff3a684335eee6196df5f8e52f6e689b31b687d364e3fdc692b478480db9cf84c20201f2e6324e2e8a9b9c547
SSDEEP 12288:oh+cwA0dv9TEukj4HL+CgdSs0jEnBUcVW0gDIdXQjsvcmJbjw:ozqvJEmHL+1dIcZ0RIdRcSw
MD5 SHA1 SHA512 SSDEEP

Hesap bildirimi.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9f86ac872435f541b72bd8da2719337f399b02ef8740a04f071b9044ae6ed397
MD5 daec8d2a480411ff1f82b24af4ac7cdf
SHA1 c61b695772de84df8508b9a740437db3a6da417d
SHA512 d70efb8a3cdeaa5288e7a602bde8aa90d3ec7c0d7ecb9f835d56a67b3bdce6daa5c81a46744d7b3c65e12f76f64a63f6718e55166f5950daa67994d0278fc523
SSDEEP 12288:NKHUp9T4ak14XL+mMVSsAjAuYcVWSMDMVqfBdcmDB:NKmJ4EXL+dVcAuv0dMVqJdc
MD5 SHA1 SHA512 SSDEEP

windows x86

MassLogger Main Payload

Minor OS version

Major OS version

Entry point

701838

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing