Overview

overview

10

Static

static

7cd8e8bdf1...74.exe

windows7_x64

10

7cd8e8bdf1...74.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7cd8e8bdf19cbdf511d7807ff8233413c544efeb9518e2171a4151790e9d2f74

  • Size

    956KB

  • Sample

    220508-g9cysacdap

  • MD5

    61d1229b0d488254e427690371417bad

  • SHA1

    a5b44ab6d137d29a46b38926b95c6d3c70fb6c8d

  • SHA256

    7cd8e8bdf19cbdf511d7807ff8233413c544efeb9518e2171a4151790e9d2f74

  • SHA512

    5f865181f4b1d683c51f5e044f12be4987a3fbf4047d7f424f7805f3d350298f0b889910f9be423f5b8a5912dd137dced5f9e4c84575199edfd73d28d1ff1b27

Score
10/10
massloggercollectionspywarestealer

Malware Config

Targets

    • Target

      7cd8e8bdf19cbdf511d7807ff8233413c544efeb9518e2171a4151790e9d2f74

    • Size

      956KB

    • MD5

      61d1229b0d488254e427690371417bad

    • SHA1

      a5b44ab6d137d29a46b38926b95c6d3c70fb6c8d

    • SHA256

      7cd8e8bdf19cbdf511d7807ff8233413c544efeb9518e2171a4151790e9d2f74

    • SHA512

      5f865181f4b1d683c51f5e044f12be4987a3fbf4047d7f424f7805f3d350298f0b889910f9be423f5b8a5912dd137dced5f9e4c84575199edfd73d28d1ff1b27

    Score
    10/10
    massloggercollectionspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks