Overview

overview

10

Static

static

9eacb0c264...f3.exe

windows7_x64

10

9eacb0c264...f3.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9eacb0c264bd35575f04cb85e5a977ab8102a28d0679de64e5a35cf44f7083f3

  • Size

    1.2MB

  • Sample

    220502-svmp8agbb8

  • MD5

    2d7e5628187c390d1f3d2cff4d40bb96

  • SHA1

    e5443049c3e6d36071dcd2af21f714466b978759

  • SHA256

    9eacb0c264bd35575f04cb85e5a977ab8102a28d0679de64e5a35cf44f7083f3

  • SHA512

    40236007c798a0aaa1d23fe61320d149ce03a1d14a3c9541ee5a180f0ec1e99abede7513842d157df4ff97b80aa321f8655f5d182868836a980e412f12b56e19

Score
10/10
massloggercollectionspywarestealer

Malware Config

Targets

    • Target

      9eacb0c264bd35575f04cb85e5a977ab8102a28d0679de64e5a35cf44f7083f3

    • Size

      1.2MB

    • MD5

      2d7e5628187c390d1f3d2cff4d40bb96

    • SHA1

      e5443049c3e6d36071dcd2af21f714466b978759

    • SHA256

      9eacb0c264bd35575f04cb85e5a977ab8102a28d0679de64e5a35cf44f7083f3

    • SHA512

      40236007c798a0aaa1d23fe61320d149ce03a1d14a3c9541ee5a180f0ec1e99abede7513842d157df4ff97b80aa321f8655f5d182868836a980e412f12b56e19

    Score
    10/10
    massloggercollectionspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks