General
-
Target
fc956a2b7d33e3de5063028a0852b2fb1e86eaa91bcf469b157032852f281211
-
Size
5.6MB
-
Sample
220319-pn1rqahhc8
-
MD5
b0f8c6ffda586af735f43da16b61e847
-
SHA1
94433fe3ce1991eca181469c5611d0aca1153635
-
SHA256
fc956a2b7d33e3de5063028a0852b2fb1e86eaa91bcf469b157032852f281211
-
SHA512
ece192665a54cb256596a9440d3c87921058c7eea70ce60268713d812e70e9b15314d07f4057611a5643dbb7db0e0c2e909879911746023cd7ea9f9e17ca4b19
Static task
static1
Behavioral task
behavioral1
Sample
fc956a2b7d33e3de5063028a0852b2fb1e86eaa91bcf469b157032852f281211.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
fc956a2b7d33e3de5063028a0852b2fb1e86eaa91bcf469b157032852f281211.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
fc956a2b7d33e3de5063028a0852b2fb1e86eaa91bcf469b157032852f281211
-
Size
5.6MB
-
MD5
b0f8c6ffda586af735f43da16b61e847
-
SHA1
94433fe3ce1991eca181469c5611d0aca1153635
-
SHA256
fc956a2b7d33e3de5063028a0852b2fb1e86eaa91bcf469b157032852f281211
-
SHA512
ece192665a54cb256596a9440d3c87921058c7eea70ce60268713d812e70e9b15314d07f4057611a5643dbb7db0e0c2e909879911746023cd7ea9f9e17ca4b19
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger Main Payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-