General

  • Target
    cdcca14762350631687767fbf582ddbb3c9a84fbae2235d308b8e1fa2077af87
  • Size 1.4MB
  • Sample220329-2brdqscbb2
  • SHA256 cdcca14762350631687767fbf582ddbb3c9a84fbae2235d308b8e1fa2077af87
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      cdcca14762350631687767fbf582ddbb3c9a84fbae2235d308b8e1fa2077af87
    • Size 1.4MB
    • SHA256 cdcca14762350631687767fbf582ddbb3c9a84fbae2235d308b8e1fa2077af87
    • MD5 SHA1 SHA512
    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    • MassLogger Main Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks