Extracted

• • Target

    525202de58e562f513d80eab1b53b4804a5afea6cf791f17084fa78b9de202ec

  • Size

    627KB

  • MD5

    4603fcb4d478d038f44c3deb950e4f5e

  • SHA1

    b91ecd8439b30dabb43e2d7a0be880f4d70c45b1

  • SHA256

    525202de58e562f513d80eab1b53b4804a5afea6cf791f17084fa78b9de202ec

  • SHA512

    2192dbc01f0a92c2787fff53bc4b766787f13d891df580392e2f6462745d991184fefa99b268870fae981a3a15779668ef3461693b6d05c6e6fc3c218e9d63d8

  Score

  10^/10

  massloggercollectionspywarestealer

  • MassLogger

    Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    stealerspywaremasslogger

  • MassLogger Main Payload

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2