General
-
Target
55247605abdc8ef6f7ad3bb5eed601a6b5da5205785ac51a9407f0d1dcde9b6d
-
Size
918KB
-
Sample
220725-ve19safag9
-
MD5
5347636231c0a9a6a31c0086eea12c32
-
SHA1
f9605a988006ada60bdf14deb997e171bcb00e7f
-
SHA256
55247605abdc8ef6f7ad3bb5eed601a6b5da5205785ac51a9407f0d1dcde9b6d
-
SHA512
c941663c6cc396634b6498f4499020e0ce86167bdf8b12d98ab353e369f5ba23354c4cb483fd25e71c4a38cbdfd177377ca2a3815b5fdb7969f94c0d8060d4a5
Static task
static1
Behavioral task
behavioral1
Sample
LIST OF PRODUCTS NEEDED.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
LIST OF PRODUCTS NEEDED.exe
Resource
win10v2004-20220721-en
Malware Config
Targets
-
-
Target
LIST OF PRODUCTS NEEDED.exe
-
Size
1.1MB
-
MD5
af517807c4b6160d07314ba228f333de
-
SHA1
9020081ebc00595e57d5d40a742682f4de0b7671
-
SHA256
e97151ce51e9463bd45ad41571141614fc0ffc8a8cbf2c74f36c20028a769f41
-
SHA512
8647a9336ff7e33b60c7f9903d9214de5842bc195f4460870f9dda8205397ef9aaddf0a371ceb90b280e9b26017e53e0c10422844ce0f30fda14b7dccc310b00
Score10/10-
MassLogger
Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.
-
MassLogger Main payload
-
Suspicious use of SetThreadContext
-