General

  • Target

    44a6fe23c3c92c48d5b1ea209ab62280320865d08e9130237dedbed53a9b9c1d

  • Size

    1017KB

  • Sample

    220329-xqma4seban

  • MD5

    5df818884576fa667196463b364ff8f2

  • SHA1

    27525c204b1d1fec69197e517df35bfba33839ab

  • SHA256

    44a6fe23c3c92c48d5b1ea209ab62280320865d08e9130237dedbed53a9b9c1d

  • SHA512

    70783a9ab56b573612689ac27f00bd23972026b94d71127b5eefb9eba3272fdad179cac723c55cf1e44510f04e90105b1796b6a7378e1d573c1603a04369818c

Malware Config

Targets

    • Target

      44a6fe23c3c92c48d5b1ea209ab62280320865d08e9130237dedbed53a9b9c1d

    • Size

      1017KB

    • MD5

      5df818884576fa667196463b364ff8f2

    • SHA1

      27525c204b1d1fec69197e517df35bfba33839ab

    • SHA256

      44a6fe23c3c92c48d5b1ea209ab62280320865d08e9130237dedbed53a9b9c1d

    • SHA512

      70783a9ab56b573612689ac27f00bd23972026b94d71127b5eefb9eba3272fdad179cac723c55cf1e44510f04e90105b1796b6a7378e1d573c1603a04369818c

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    • MassLogger Main Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks