General
-
Target
a1ec3bc9aeaa6c345eedbb039bf3b7e8226977a7740d05ea39063da82ed2eaf7
-
Size
1.1MB
-
Sample
220420-r25nyadge6
-
MD5
2fb57f942fe9fb11fc179c04bb0ca381
-
SHA1
c2ef94d710d2c770e2a7a9b1bfc55770b157c6e4
-
SHA256
a1ec3bc9aeaa6c345eedbb039bf3b7e8226977a7740d05ea39063da82ed2eaf7
-
SHA512
a487ab765ad319fdbe99da4bada3820f39fd4ed099d8168912dcfb68bf0805a9f755705b2a5f46dc35b46e39ae55d45a51ee67bfd479aafc6c4e42a7e7808ec4
Static task
static1
Behavioral task
behavioral1
Sample
a1ec3bc9aeaa6c345eedbb039bf3b7e8226977a7740d05ea39063da82ed2eaf7.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
a1ec3bc9aeaa6c345eedbb039bf3b7e8226977a7740d05ea39063da82ed2eaf7.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
a1ec3bc9aeaa6c345eedbb039bf3b7e8226977a7740d05ea39063da82ed2eaf7
-
Size
1.1MB
-
MD5
2fb57f942fe9fb11fc179c04bb0ca381
-
SHA1
c2ef94d710d2c770e2a7a9b1bfc55770b157c6e4
-
SHA256
a1ec3bc9aeaa6c345eedbb039bf3b7e8226977a7740d05ea39063da82ed2eaf7
-
SHA512
a487ab765ad319fdbe99da4bada3820f39fd4ed099d8168912dcfb68bf0805a9f755705b2a5f46dc35b46e39ae55d45a51ee67bfd479aafc6c4e42a7e7808ec4
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger Main Payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-