Overview

overview

10

Static

static

PO#7543.exe

windows7_x64

1

PO#7543.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0708ae21c945e7a47d303c2a0bb4dcbe19f21ddf7e2737f99bb08989fd7cf99d

  • Size

    966KB

  • Sample

    220503-y8m6sseefq

  • MD5

    431ae66727ad6119147a9b30242f1a0a

  • SHA1

    04ee38ce3dcf448cb48ba454d0fbb79dbddb52eb

  • SHA256

    0708ae21c945e7a47d303c2a0bb4dcbe19f21ddf7e2737f99bb08989fd7cf99d

  • SHA512

    ff4f5bc6ed8b6d2ca4b105070da815ce95417cd8852bab5a5b9e05d90a9aeba52c0b36792d7a73b2c4aba7fbf82327fe300fda202fc12831fbd9893cab427717

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      PO#7543.exe

    • Size

      1.0MB

    • MD5

      5aa8483a8c628f34d66a2f29a205ba93

    • SHA1

      02fe589f59943e848bffb0ddd6a3aacd507a8cc2

    • SHA256

      3909d98e17a32e0f29fbe151a84907b5319b2f8317ba04a8c55ad9668db37e3b

    • SHA512

      878f4e43a5ef631f81edfdd5c1984daa94610aeb24f82502e4a65bcd31e486071b1fcf9c5a950e47e74d93f43754549e8139155cc408b1ddd9c20564e5eb8e82

    Score
    10/10
    massloggerspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks