Overview

overview

10

Static

static

47a5dfacda...91.exe

windows7_x64

10

47a5dfacda...91.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47a5dfacda20c65b5331ea25ccdf952cb880ff7692ecf7a57a63b09b0f6f1c91

  • Size

    2.5MB

  • Sample

    220420-kqd9aadfa4

  • MD5

    89008a4d01d3987d05ecf8525d58993e

  • SHA1

    129eec2816a09bd0063c5725f13cf654d306ed3d

  • SHA256

    47a5dfacda20c65b5331ea25ccdf952cb880ff7692ecf7a57a63b09b0f6f1c91

  • SHA512

    d5cb6d5836acdb82bf09d4beae8c464c812feff0deee282d0b35fb6324b6fb684bf8ed989fff5fc92030da8b299ab963ab95a53cc81e03dce1f6c729748af326

Score
10/10
massloggercollectionspywarestealer

Malware Config

Targets

    • Target

      47a5dfacda20c65b5331ea25ccdf952cb880ff7692ecf7a57a63b09b0f6f1c91

    • Size

      2.5MB

    • MD5

      89008a4d01d3987d05ecf8525d58993e

    • SHA1

      129eec2816a09bd0063c5725f13cf654d306ed3d

    • SHA256

      47a5dfacda20c65b5331ea25ccdf952cb880ff7692ecf7a57a63b09b0f6f1c91

    • SHA512

      d5cb6d5836acdb82bf09d4beae8c464c812feff0deee282d0b35fb6324b6fb684bf8ed989fff5fc92030da8b299ab963ab95a53cc81e03dce1f6c729748af326

    Score
    10/10
    massloggercollectionspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks