General
-
Target
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fworkupload.com%2ffile%2fvYrmwUt8qUQ&umid=501f9860-4f53-4a8b-85b0-654c5b42e3e9&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-8bff600011fe4de9fa59bfc77707e6c427518398
-
Sample
231120-ky6cqsff5y
Score
10/10
Malware Config
Targets
-
-
Target
https://ddec1-0-en-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fworkupload.com%2ffile%2fvYrmwUt8qUQ&umid=501f9860-4f53-4a8b-85b0-654c5b42e3e9&auth=84247b409afe2128671efe0c5790aaffcd4c1d5f-8bff600011fe4de9fa59bfc77707e6c427518398
Score10/10-
M00nd3v_Logger
M00nd3v Logger is a .NET stealer/logger targeting passwords from browsers and email clients.
-
M00nD3v Logger payload
Detects M00nD3v Logger payload in memory.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-