General

  • Target

    66d05250514627cddb42608a19e5bcfbb776861ece06b0314d5183dcbc55d818

  • Size

    836KB

  • Sample

    220417-sdn7qabdh3

  • MD5

    b66137894e7b2ce09501a59f4fad54aa

  • SHA1

    69001867345de1d042b3827b5a07b2fc47507f8e

  • SHA256

    66d05250514627cddb42608a19e5bcfbb776861ece06b0314d5183dcbc55d818

  • SHA512

    49c48cd41475c1e47541be5d51ba43bc6d603bb297918b45afea737dddfdb105921bb85fd259eb3fe59053e1863ce447a9c6bbb28cf4c9e8028c57c7fd542360

Malware Config

Targets

    • Target

      66d05250514627cddb42608a19e5bcfbb776861ece06b0314d5183dcbc55d818

    • Size

      836KB

    • MD5

      b66137894e7b2ce09501a59f4fad54aa

    • SHA1

      69001867345de1d042b3827b5a07b2fc47507f8e

    • SHA256

      66d05250514627cddb42608a19e5bcfbb776861ece06b0314d5183dcbc55d818

    • SHA512

      49c48cd41475c1e47541be5d51ba43bc6d603bb297918b45afea737dddfdb105921bb85fd259eb3fe59053e1863ce447a9c6bbb28cf4c9e8028c57c7fd542360

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    • MassLogger Main Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks