General
-
Target
06f151728290c66867faafe97bc1737b1e46ef0164a14baeaee48a12151ad65e
-
Size
903KB
-
Sample
220420-esh3csagb2
-
MD5
83eceb00777a3c444c17b729ae7ec3c2
-
SHA1
0565af5bdd342f77690bbe6f8a59cb91a2d1af0f
-
SHA256
06f151728290c66867faafe97bc1737b1e46ef0164a14baeaee48a12151ad65e
-
SHA512
dfffa9aae14bd980b68720a57b75235c9c66134861d4177f9afd45679530e03994c5d0b130abf9aa3b97ee30ba96ad1cb495c100a8b094e164901ab294ad46aa
Static task
static1
Behavioral task
behavioral1
Sample
06f151728290c66867faafe97bc1737b1e46ef0164a14baeaee48a12151ad65e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
06f151728290c66867faafe97bc1737b1e46ef0164a14baeaee48a12151ad65e.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
06f151728290c66867faafe97bc1737b1e46ef0164a14baeaee48a12151ad65e
-
Size
903KB
-
MD5
83eceb00777a3c444c17b729ae7ec3c2
-
SHA1
0565af5bdd342f77690bbe6f8a59cb91a2d1af0f
-
SHA256
06f151728290c66867faafe97bc1737b1e46ef0164a14baeaee48a12151ad65e
-
SHA512
dfffa9aae14bd980b68720a57b75235c9c66134861d4177f9afd45679530e03994c5d0b130abf9aa3b97ee30ba96ad1cb495c100a8b094e164901ab294ad46aa
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger Main Payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-