General
-
Target
6ffbfca3e36e74a94ea243cac278f061a29d443eb89f7ffae98c38f487549b3b
-
Size
842KB
-
Sample
220520-2fj58aadbl
-
MD5
e1619365c4d254b193df99665d17b1c7
-
SHA1
ff530639470c96f9359f167959feea01ecd0d4bd
-
SHA256
6ffbfca3e36e74a94ea243cac278f061a29d443eb89f7ffae98c38f487549b3b
-
SHA512
8951643c4851ddbd6133a8bb23c38a0da883fe009ba7a6dfbc800382541aeeefe2e019fbfe5b2478b007a5ca68fddd11e7bf800ae89fd3e06bc25b7229d18f8c
Malware Config
Targets
-
-
Target
New Inquiry-08312020.exe
-
Size
1.2MB
-
MD5
930f62764aa710a930de8d85abb9f25f
-
SHA1
23b090662b3deaadf4e1db64849f8eee06e18a36
-
SHA256
de00e60ea65a5c4f7804c137b07d6973bdf8fc17ca192035b7976362e978a8d2
-
SHA512
408f2f2eea634b2fa12f50c22b1da4fe9d6703e245a3a549a080707bf01cb4997578ee3f62a2530c2527eeb355b8aebd871ec25b7fa46107684f30cd08a101e0
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger Main Payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-