General

  • Target
    b134fc241ecd93ac658ded7bdad5eaf5f600f255e3fc05c383c23aad8b045592
  • Size 824KB
  • Sample220511-cy3mvadfa9
  • SHA256 b134fc241ecd93ac658ded7bdad5eaf5f600f255e3fc05c383c23aad8b045592
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      b134fc241ecd93ac658ded7bdad5eaf5f600f255e3fc05c383c23aad8b045592
    • Size 824KB
    • SHA256 b134fc241ecd93ac658ded7bdad5eaf5f600f255e3fc05c383c23aad8b045592
    • MD5 SHA1 SHA512
    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    • MassLogger Main Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks