masslogger | ff49433d67b8d8ffb6c3757b20b3baf4f45399ec3560876ef4f819b0aae6c194

General

Target
ff49433d67b8d8ffb6c3757b20b3baf4f45399ec3560876ef4f819b0aae6c194
Size 554KB
Sample220521-b7msbagden
SHA256 ff49433d67b8d8ffb6c3757b20b3baf4f45399ec3560876ef4f819b0aae6c194
MD5 5ce17b50e448c0949b5d9fd4f511ee34
SHA1 1654097ab0aed9c4adccbb9bce8bd16b596c59ad
SHA512 c2eae8a677e15b2021b327a4f9c53b3556f087b412c8f764b75ff1cdcf3ece76396af9b36a54c1556ad2179f572028b1a3bb4526682d0fb45a2d405f5bdfe54a
SSDEEP 12288:b1JJNpoEQMmLuWdxHGglirIg9/fFJO2BBIgtWK+lmCGN4ZTkmuzClcwVyh1H:bNoEQ3lHFgZfFjBgnlm8ZTkKl7yh1H
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

masslogger

Malware Config

Signatures

MassLogger Main Payload 1 IoCs

resource	yara_rule
static1/unpack001/PO 7405591, 7756947 ,7756740.exe	family_masslogger

Masslogger family
masslogger

File Explorer

ff49433d67b8d8ffb6c3757b20b3baf4f45399ec3560876ef4f819b0aae6c194

.rar 554KB
PO 7405591, 7756947 ,7756740.exe

.exe 1.2MB

ff49433d67b8d8ffb6c3757b20b3baf4f45399ec3560876ef4f819b0aae6c194

SHA256 ff49433d67b8d8ffb6c3757b20b3baf4f45399ec3560876ef4f819b0aae6c194
MD5 5ce17b50e448c0949b5d9fd4f511ee34
SHA1 1654097ab0aed9c4adccbb9bce8bd16b596c59ad
SHA512 c2eae8a677e15b2021b327a4f9c53b3556f087b412c8f764b75ff1cdcf3ece76396af9b36a54c1556ad2179f572028b1a3bb4526682d0fb45a2d405f5bdfe54a
SSDEEP 12288:b1JJNpoEQMmLuWdxHGglirIg9/fFJO2BBIgtWK+lmCGN4ZTkmuzClcwVyh1H:bNoEQ3lHFgZfFjBgnlm8ZTkKl7yh1H
MD5 SHA1 SHA512 SSDEEP

PO 7405591, 7756947 ,7756740.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f8a4be5923387077b32e65cfea383db1576e5dd068b926a1e9833ff24e48fd64
MD5 63831c721dddee09571fe4d9df808576
SHA1 6fdd675db58fe108ec77ad19f72d05d908cbe07c
SHA512 c40638ecfab9b4de4756a29a09d68a4b896adbfedf8a43a0ebe7e09647d24a3d5e1c7bbe8fe324d090ebcf00424f59f5884cde0ac8f3974796d22a36b86da4c0
SSDEEP 12288:hWvldz1OFn2r7cKPdFGoZZ0P1KtPRBsETU1TfVq87mQyp62EO:g/1hQ8FGoZZ08tP/XI7VqWmNvE
MD5 SHA1 SHA512 SSDEEP

windows x86

MassLogger Main Payload

Minor OS version

Major OS version

Entry point

1290126

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing