Overview

overview

10

Static

static

08be694ed1...88.exe

windows7_x64

10

08be694ed1...88.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08be694ed1a49b278928554b26a070ecc27d9af84930a8c5386e89adeeeef388

  • Size

    1.2MB

  • Sample

    220516-xggz2acac4

  • MD5

    5e2fb646f9d2b0a82e9b08cd06fc5963

  • SHA1

    06cda86331a278d8676072508e09689bd643caad

  • SHA256

    08be694ed1a49b278928554b26a070ecc27d9af84930a8c5386e89adeeeef388

  • SHA512

    44e18afe6e29521dfa7369e1efbce8c720d46b9f5a0c42470abc05060e358e52e7029e7496f4e4d18ee9e8075d0f0c12fb4a4286924896627ffe87a57adc2daf

Score
10/10
massloggercollectionspywarestealer

Malware Config

Targets

    • Target

      08be694ed1a49b278928554b26a070ecc27d9af84930a8c5386e89adeeeef388

    • Size

      1.2MB

    • MD5

      5e2fb646f9d2b0a82e9b08cd06fc5963

    • SHA1

      06cda86331a278d8676072508e09689bd643caad

    • SHA256

      08be694ed1a49b278928554b26a070ecc27d9af84930a8c5386e89adeeeef388

    • SHA512

      44e18afe6e29521dfa7369e1efbce8c720d46b9f5a0c42470abc05060e358e52e7029e7496f4e4d18ee9e8075d0f0c12fb4a4286924896627ffe87a57adc2daf

    Score
    10/10
    massloggercollectionspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks