Overview

overview

10

Static

static

097663899 ...ER.exe

windows7_x64

10

097663899 ...ER.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    843350d85ff1df2146d6a0f4b80fd182480ed7388a621c9f70a6b66a95004d1b

  • Size

    683KB

  • Sample

    220521-c4bfjsehg4

  • MD5

    5c3cc2b58342d95b66a33aaef02f4811

  • SHA1

    b8e63a16b806aba0e5dce2983f91f73a25f2ad5e

  • SHA256

    843350d85ff1df2146d6a0f4b80fd182480ed7388a621c9f70a6b66a95004d1b

  • SHA512

    3dcfe2bff6514b85310beaf301f4e88d1c0a27e93feba4514c4c5961c0e9057400debab1253c638e86b392590c84ee554d65ea6609f2d94918053ee3c292ac00

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      097663899 NEW ORDER.exe

    • Size

      806KB

    • MD5

      7fa6a760ba0703205ba51d9bd39d67b3

    • SHA1

      965538e4662b0b2d628c1f3f72f2ec0b570d2424

    • SHA256

      c744751ad79f737ac78fe9c69afac4c7b8940951b2fe67d20175d27e77721371

    • SHA512

      3d906e71f364e4ebd915634094a49ea4223c27bfb76529be9d49b65044610305022492d6e235952cb480f6a3da0477a98c71a450e8a8511803cc4efdc652c00e

    Score
    10/10
    massloggerspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks