General

  • Target

    6dd4bcbdc85fa631028292e643bbc335bb2ec29faad3fdaae7dbf1a7db492d4c

  • Size

    1.3MB

  • Sample

    220418-p2npbabdb8

  • MD5

    b62d3c36576c5280054aa23b0c7b38ed

  • SHA1

    75b68743d35a94acd4aa0e086728ae8dc2b89180

  • SHA256

    6dd4bcbdc85fa631028292e643bbc335bb2ec29faad3fdaae7dbf1a7db492d4c

  • SHA512

    403ba3d0fcf79300b42ad87a4db6de64dd601e0a95bdcd2d701451a301c56deeed62d97a85c580bc9b5de46b22670d1da06e9243b2276ef26b5dc945c85e9c68

Malware Config

Targets

    • Target

      6dd4bcbdc85fa631028292e643bbc335bb2ec29faad3fdaae7dbf1a7db492d4c

    • Size

      1.3MB

    • MD5

      b62d3c36576c5280054aa23b0c7b38ed

    • SHA1

      75b68743d35a94acd4aa0e086728ae8dc2b89180

    • SHA256

      6dd4bcbdc85fa631028292e643bbc335bb2ec29faad3fdaae7dbf1a7db492d4c

    • SHA512

      403ba3d0fcf79300b42ad87a4db6de64dd601e0a95bdcd2d701451a301c56deeed62d97a85c580bc9b5de46b22670d1da06e9243b2276ef26b5dc945c85e9c68

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    • MassLogger Main Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks