Overview

overview

10

Static

static

SKM_C33501...00.exe

windows7_x64

5

SKM_C33501...00.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    accb153830327075ce1b342d2199d07f330fea6fc95cff4099d2e07079a117fc

  • Size

    855KB

  • Sample

    220520-qm315adfe5

  • MD5

    9b48a05d6f9e036ed4850093573c0779

  • SHA1

    204b5c99cd0af82a2d25f48669830fe94763e954

  • SHA256

    accb153830327075ce1b342d2199d07f330fea6fc95cff4099d2e07079a117fc

  • SHA512

    3dab1d701c317abb2e0af87e02c17225fa320175e1e510ffcbe2bd673fa9276fe6cf2d63bf97d173588b74fa33676b0d6814d18680c4d83dab9d295f2774bb1b

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      SKM_C3350191107102300.exe

    • Size

      1.3MB

    • MD5

      4509f8b27545e3a27ee3bc66df679b7c

    • SHA1

      0b3687916e09fdf8528e06670ab6ba7b0b72fdf3

    • SHA256

      15d49746815865a2bc0eb51c3479cf49a1e3cff398479a31c935d1cfbb64d5f0

    • SHA512

      f77331f04e958ba87a4ba1b927d28058ce382242bf2242636bf9e96101b4ac43ca49c557744d7a7df6a35ea7c314101ae40491edde643aa8894d656873d93d92

    Score
    10/10
    massloggerspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks