masslogger | dae1ef0caddd2127f5d6014aa01a0010b83bcf59381cf4d4d9d1a76d02fea136 | Triage

Sharing

General

Target

dae1ef0caddd2127f5d6014aa01a0010b83bcf59381cf4d4d9d1a76d02fea136
Size

1.9MB
MD5

2d9568d2869e4e77acabd0cf0b3a5d51
SHA1

83988003db8d73e3099755c7846461922aa3bd70
SHA256

dae1ef0caddd2127f5d6014aa01a0010b83bcf59381cf4d4d9d1a76d02fea136
SHA512

d0da5f978e532dcf3d3d96639632848e0684dcfe8d1f92e3aa2d4907c85056bb4d142b6aad1dfa23136e1a63af0e083953c5dbac9fb76837fef57bafce7174b6
SSDEEP

24576:hZUB0oQ+CC17UvPV997GhW/G1CA5CDR3iC:hmGoQ+CC17UvPVfGsG1wDRSC

Score

10^/10

masslogger

Malware Config

Signatures

MassLogger log file 1 IoCs

Detects a log file produced by MassLogger.

resource	yara_rule
sample	masslogger_log_file

Masslogger family
masslogger

Files

dae1ef0caddd2127f5d6014aa01a0010b83bcf59381cf4d4d9d1a76d02fea136
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.data
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ