Overview

overview

10

Static

static

e1ed9e96c9...e0.exe

windows7_x64

10

e1ed9e96c9...e0.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1ed9e96c9deea67b900d3428fae5d275c0e1e0a0797e4d78f21ce52c3da52e0

  • Size

    1.0MB

  • Sample

    220509-a2562abhf5

  • MD5

    5f4d090acc1bd1236f1cc9ebf9828461

  • SHA1

    303d0317a0c04e56ba50aafdd05d3f891bf2fb1c

  • SHA256

    e1ed9e96c9deea67b900d3428fae5d275c0e1e0a0797e4d78f21ce52c3da52e0

  • SHA512

    b2cfa6e47143b85caa56a313d7133233affd3a71d356d77ff232f58916187ce1a0ff96316dced5a22963808244c29273e4656fd7783bbc396d951d1e5ed0d949

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      e1ed9e96c9deea67b900d3428fae5d275c0e1e0a0797e4d78f21ce52c3da52e0

    • Size

      1.0MB

    • MD5

      5f4d090acc1bd1236f1cc9ebf9828461

    • SHA1

      303d0317a0c04e56ba50aafdd05d3f891bf2fb1c

    • SHA256

      e1ed9e96c9deea67b900d3428fae5d275c0e1e0a0797e4d78f21ce52c3da52e0

    • SHA512

      b2cfa6e47143b85caa56a313d7133233affd3a71d356d77ff232f58916187ce1a0ff96316dced5a22963808244c29273e4656fd7783bbc396d951d1e5ed0d949

    Score
    10/10
    massloggerspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks