Overview

overview

10

Static

static

fda81f263a...83.exe

windows7_x64

6

fda81f263a...83.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fda81f263ab7e2516caf64983c7847ae4836cc3758b0332923fa222b47b93783

  • Size

    1.3MB

  • Sample

    220524-rwwtvaeeb3

  • MD5

    e100dae48ea9573f3c6c1eae79f69c67

  • SHA1

    5a5ea06984790ce00f152a3ccc6e2dcb7c6b6f08

  • SHA256

    fda81f263ab7e2516caf64983c7847ae4836cc3758b0332923fa222b47b93783

  • SHA512

    1a9295b144b8403cd2c2366d681267752057275cf447cc9902b5765dbf6cf5eb5ef0fbcd2cea33478205333314a43c30093bb7baefed64bba0b2754185613291

Score
10/10
massloggerspywarestealer

Malware Config

Targets

    • Target

      fda81f263ab7e2516caf64983c7847ae4836cc3758b0332923fa222b47b93783

    • Size

      1.3MB

    • MD5

      e100dae48ea9573f3c6c1eae79f69c67

    • SHA1

      5a5ea06984790ce00f152a3ccc6e2dcb7c6b6f08

    • SHA256

      fda81f263ab7e2516caf64983c7847ae4836cc3758b0332923fa222b47b93783

    • SHA512

      1a9295b144b8403cd2c2366d681267752057275cf447cc9902b5765dbf6cf5eb5ef0fbcd2cea33478205333314a43c30093bb7baefed64bba0b2754185613291

    Score
    10/10
    massloggerspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main Payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks