masslogger | ed2a2e3a6f154f937fb6967178b26b090c5d02accaee723bd62d25b77bb70cb1

General

Target
ed2a2e3a6f154f937fb6967178b26b090c5d02accaee723bd62d25b77bb70cb1
Size 591KB
Sample220521-a848babec4
SHA256 ed2a2e3a6f154f937fb6967178b26b090c5d02accaee723bd62d25b77bb70cb1
MD5 059607538480e5fed2f6e5d73e01b9b7
SHA1 ee873ca2f22ffa9cf6d58db583ca86695d585aca
SHA512 3db33dab1bf8da93f4d4b9c0d7ebaa5d6ec70d45709ca01ff1116116c86445e6359990a253701bd1e8e539ba50ba7e50cbfdd65fb9f830e22bbed303aa70d0a5
SSDEEP 12288:wvGuxC5NvipCiG7LxAQSTnsVRImpy3B5pJ1BOm7VOE6aH/Oz:UGuwNqpCiaALLERIEyXBF74y6
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

masslogger

Malware Config

Signatures

MassLogger Main Payload 1 IoCs

resource	yara_rule
static1/unpack001/�berf�llige Rechnung.exe	family_masslogger

Masslogger family
masslogger

File Explorer

ed2a2e3a6f154f937fb6967178b26b090c5d02accaee723bd62d25b77bb70cb1

.zip 591KB
�berf�llige Rechnung.exe

.exe 1.4MB

ed2a2e3a6f154f937fb6967178b26b090c5d02accaee723bd62d25b77bb70cb1

SHA256 ed2a2e3a6f154f937fb6967178b26b090c5d02accaee723bd62d25b77bb70cb1
MD5 059607538480e5fed2f6e5d73e01b9b7
SHA1 ee873ca2f22ffa9cf6d58db583ca86695d585aca
SHA512 3db33dab1bf8da93f4d4b9c0d7ebaa5d6ec70d45709ca01ff1116116c86445e6359990a253701bd1e8e539ba50ba7e50cbfdd65fb9f830e22bbed303aa70d0a5
SSDEEP 12288:wvGuxC5NvipCiG7LxAQSTnsVRImpy3B5pJ1BOm7VOE6aH/Oz:UGuwNqpCiaALLERIEyXBF74y6
MD5 SHA1 SHA512 SSDEEP

�berf�llige Rechnung.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3e3acb1023d772ba35383feaf4fb7f2bde81e7565b88b3d7d5729812663af561
MD5 8df8dad99f0d62913cbb02aadc032b64
SHA1 8f0314669d3fad466faf133a4c71d2a90133f652
SHA512 a95081598614baa8ba6c87e7fd57be37f88a16793bc6def7f9a15d21384ff98a7cadff37ef90488663d955036620caf75d6c6f3b2e6533e2d464d464e1003560
SSDEEP 24576:sRMrp9jR58m2D9sIcqFEkRcLnaTh9E8mt85fIKrjg:1jR58m8sD6Mneh9Jmt6fIKfg
MD5 SHA1 SHA512 SSDEEP

windows x86

MassLogger Main Payload

Minor OS version

Major OS version

Entry point

1524414

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing