General

  • Target

    256394119ede05a8544c4c9ba964197bac7fa5c7aeccf58aef7c2b67bc0ddc45

  • Size

    788KB

  • Sample

    220611-xx45hachhl

  • MD5

    eec2f17ba084b62fe9a20c9898838db7

  • SHA1

    0ae77e1421e7ae5fff9b6a771162b0114b674a7b

  • SHA256

    256394119ede05a8544c4c9ba964197bac7fa5c7aeccf58aef7c2b67bc0ddc45

  • SHA512

    90893d074ea672a3dbe40c29ea2b25984df4cfe134ee4248109cf91377859639fee1b5a3887dd1b9f046409c949f21e745e456f3825c24862e7320090e86bde9

Malware Config

Targets

    • Target

      256394119ede05a8544c4c9ba964197bac7fa5c7aeccf58aef7c2b67bc0ddc45

    • Size

      788KB

    • MD5

      eec2f17ba084b62fe9a20c9898838db7

    • SHA1

      0ae77e1421e7ae5fff9b6a771162b0114b674a7b

    • SHA256

      256394119ede05a8544c4c9ba964197bac7fa5c7aeccf58aef7c2b67bc0ddc45

    • SHA512

      90893d074ea672a3dbe40c29ea2b25984df4cfe134ee4248109cf91377859639fee1b5a3887dd1b9f046409c949f21e745e456f3825c24862e7320090e86bde9

    • M00nd3v_Logger

      M00nd3v Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

    • M00nD3v Logger Payload

      Detects M00nD3v Logger payload in memory.

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • NirSoft WebBrowserPassView

      Password recovery tool for various web browsers

    • Nirsoft

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks