Static task
static1
Behavioral task
behavioral1
Sample
OOCS DI 20002876.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
OOCS DI 20002876.exe
Resource
win10v2004-20220414-en
General
-
Target
4fb747b6c79d7e978c661fd3479124e92c5be6ba644c370dd4acd633e3d5fdf7
-
Size
1.5MB
-
MD5
88b5cae0beed5703ca2c5a4f0dc16361
-
SHA1
4074cb75245db5cddeb9afbcc4a411cc839d0778
-
SHA256
4fb747b6c79d7e978c661fd3479124e92c5be6ba644c370dd4acd633e3d5fdf7
-
SHA512
f882358191182333c52e20c7cafaef688c6d53410cebdded57377003f2031e2f345964528193652d20dc0933bcc3741c43ae21b6cad9a1a23fbfc0202f0f16bd
-
SSDEEP
12288:iMfUaGWFn+W+/HEkNtLyIsG5EypNbv7sUyzO2kTCvZOEAXEJaCvr3tasNDu:Z8TdW+ls1ipv7sfj+wOVXSaCxas
Malware Config
Signatures
-
MassLogger Main Payload 2 IoCs
Processes:
resource yara_rule sample family_masslogger static1/unpack001/OOCS DI 20002876.exe family_masslogger -
Masslogger family
Files
-
4fb747b6c79d7e978c661fd3479124e92c5be6ba644c370dd4acd633e3d5fdf7.iso
-
OOCS DI 20002876.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ