Overview

overview

10

Static

static

Order Item...es.exe

windows7_x64

10

Order Item...es.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b8f89962199f5cb6a1e50c624af54ea0970f7ee8cb4ca0b71eba584c7f0f1e5

  • Size

    845KB

  • Sample

    220420-kyq8taeac6

  • MD5

    b7f4cec37eec991f99147e7563036a55

  • SHA1

    b2e4b28675ec70ad2c32447d9f852355bb6f46f6

  • SHA256

    7b8f89962199f5cb6a1e50c624af54ea0970f7ee8cb4ca0b71eba584c7f0f1e5

  • SHA512

    77eb76ac228b9fc1b5672e9d144aea84aa6fefea20d70d1c6be7f53932874050bfb0622d9965d174f3fe4ccbb00ec0ca95779091da0f710f80c163e94e760229

Score
10/10
massloggercollectionspywarestealer

Malware Config

Targets

    • Target

      Order Item list With Samples.exe

    • Size

      1.1MB

    • MD5

      e5631d010f22580deada6cd6a32cac23

    • SHA1

      8a37aefab3741d074ffa6c5a9b1e77bcd8130bc5

    • SHA256

      c82f95325307d64b524bae80ff2cdc3e5db082842f2148de16d8c3e9ffc66773

    • SHA512

      0b31077fd6e2a99ee0685d8adb0010b9b7a8b5ac7de18f42508365583608cffe0030b09dcb577e67beaf71abbf73ee8316fe3697a99a899a91314adf2c7c9369

    Score
    10/10
    massloggercollectionspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks