Overview

overview

10

Static

static

7c2e49a372...fe.exe

windows7_x64

1

7c2e49a372...fe.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c2e49a372774be85d91e19ed6c8481879cdfe203ca8b54bb22bcd209bcee5fe

  • Size

    502KB

  • Sample

    220512-paay5sgeeq

  • MD5

    16bc4c027c2c181559dc8ae64a0d5c9e

  • SHA1

    f9714d8565402a7462c332b596218ace4a515ddf

  • SHA256

    7c2e49a372774be85d91e19ed6c8481879cdfe203ca8b54bb22bcd209bcee5fe

  • SHA512

    b60478750b1183637b782224f6a646f491f1481146dec90510125e94226634353107fb3527d00a8a45a12b84c27c1ad1cb600aadc209e6972b69b6ae35b286d7

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      7c2e49a372774be85d91e19ed6c8481879cdfe203ca8b54bb22bcd209bcee5fe

    • Size

      502KB

    • MD5

      16bc4c027c2c181559dc8ae64a0d5c9e

    • SHA1

      f9714d8565402a7462c332b596218ace4a515ddf

    • SHA256

      7c2e49a372774be85d91e19ed6c8481879cdfe203ca8b54bb22bcd209bcee5fe

    • SHA512

      b60478750b1183637b782224f6a646f491f1481146dec90510125e94226634353107fb3527d00a8a45a12b84c27c1ad1cb600aadc209e6972b69b6ae35b286d7

    Score
    10/10
    massloggerspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks