Overview

overview

10

Static

static

Shipping Doc 3454.exe

windows7_x64

1

Shipping Doc 3454.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99d55ebeea7a36f5c9549b16ee65675a327edb4c2e43833f3a94a2fd6d200f39

  • Size

    830KB

  • Sample

    220502-sx3jfsgca8

  • MD5

    c5dc77fff04ead65e4bb9d2da72c5e92

  • SHA1

    26293d0793840489a4c00a30da107557c9de4a95

  • SHA256

    99d55ebeea7a36f5c9549b16ee65675a327edb4c2e43833f3a94a2fd6d200f39

  • SHA512

    686a5d423d3b23f5fd6e7c3111238a21ee4bbdd9306a464dfe7691e18a747f88e0f4552042668c385d72b71485510fc020e581ce73a57a303bcd17d312974b7d

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      Shipping Doc 3454.exe

    • Size

      970KB

    • MD5

      ff65414919a5ca429bd872a4f5ae696a

    • SHA1

      3cbfcdb8b5f7bcab7bd09125627228bee497faba

    • SHA256

      4b174227ea49d30f3378e8469d9849015779d6d3da73333ad0b386411bfade20

    • SHA512

      6177b8c413aa14ad5ec49b9b71a59d89a53ffc10dcdb2a76a8ec64cdfe3541776f841f501da04d6aad1a7c64c4a44904f5f30bb6051feb2c3a5bc51d12c2e0cd

    Score
    10/10
    massloggerspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks