General

  • Target

    55247605abdc8ef6f7ad3bb5eed601a6b5da5205785ac51a9407f0d1dcde9b6d

  • Size

    918KB

  • Sample

    220725-ve19safag9

  • MD5

    5347636231c0a9a6a31c0086eea12c32

  • SHA1

    f9605a988006ada60bdf14deb997e171bcb00e7f

  • SHA256

    55247605abdc8ef6f7ad3bb5eed601a6b5da5205785ac51a9407f0d1dcde9b6d

  • SHA512

    c941663c6cc396634b6498f4499020e0ce86167bdf8b12d98ab353e369f5ba23354c4cb483fd25e71c4a38cbdfd177377ca2a3815b5fdb7969f94c0d8060d4a5

Malware Config

Targets

    • Target

      LIST OF PRODUCTS NEEDED.exe

    • Size

      1.1MB

    • MD5

      af517807c4b6160d07314ba228f333de

    • SHA1

      9020081ebc00595e57d5d40a742682f4de0b7671

    • SHA256

      e97151ce51e9463bd45ad41571141614fc0ffc8a8cbf2c74f36c20028a769f41

    • SHA512

      8647a9336ff7e33b60c7f9903d9214de5842bc195f4460870f9dda8205397ef9aaddf0a371ceb90b280e9b26017e53e0c10422844ce0f30fda14b7dccc310b00

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    • MassLogger Main payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks