General

  • Target

    3d651f6264da7ba84b71f9495f815b26254a4d3085760c5d97b40d40a998d02c

  • Size

    1.1MB

  • Sample

    220414-qvnamsaghj

  • MD5

    0926c811a25166772fe8e5b851111ac0

  • SHA1

    3dd43c9f30d385c375303cba97bca5ee5f136a2a

  • SHA256

    3d651f6264da7ba84b71f9495f815b26254a4d3085760c5d97b40d40a998d02c

  • SHA512

    6092b0b0b15409b09f9b4ee29ee7efbf2021a08895247232112b5aff87568ed493472939939673c2d23dde535febd5758ff55bd58fc740c0176a20094cddd5fd

Malware Config

Targets

    • Target

      3d651f6264da7ba84b71f9495f815b26254a4d3085760c5d97b40d40a998d02c

    • Size

      1.1MB

    • MD5

      0926c811a25166772fe8e5b851111ac0

    • SHA1

      3dd43c9f30d385c375303cba97bca5ee5f136a2a

    • SHA256

      3d651f6264da7ba84b71f9495f815b26254a4d3085760c5d97b40d40a998d02c

    • SHA512

      6092b0b0b15409b09f9b4ee29ee7efbf2021a08895247232112b5aff87568ed493472939939673c2d23dde535febd5758ff55bd58fc740c0176a20094cddd5fd

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    • MassLogger Main Payload

    • Meta Stealer Stealer

      Meta Stealer steals passwords stored in browsers, written in C++.

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks