Extracted

• • Target

    cv.exe

  • Size

    3.1MB

  • MD5

    8e2d91235bb4934329abf1a295046231

  • SHA1

    98dc2adc20715025daf23d20c6dcdd0cc7de3b02

  • SHA256

    a500af65cdde463b260205bf423f59e03a3f3ffbff5838af44ad46172d5554b9

  • SHA512

    d7c81f962356951c0e7e6c4cef226579813340397b2275805597bbc15fc9ff1baf937a3695cf2dd35aa0026981d5a6d1a9e52b32a281770b2536cc1372b4629a

  Score

  10^/10

  massloggercollectionspywarestealerupx

  • MassLogger

    Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    stealerspywaremasslogger

  • MassLogger log file

    Detects a log file produced by MassLogger.

  • ACProtect 1.3x - 1.4x DLL software

    Detects file using ACProtect software.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Drops startup file

  • Loads dropped DLL

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2