a310logger | cc81a1d881e8f958dd702cb9540831f74dd22a9e47045c6d6646b5c78e7f5676

Analysis

max time kernel
144s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19-12-2023 12:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

29c14db2b9dab16788707bca13341a48.exe
Size

80KB
MD5

29c14db2b9dab16788707bca13341a48
SHA1

bd742f5dca9a4cb85022be52ae5c5b06c68922b3
SHA256

cc81a1d881e8f958dd702cb9540831f74dd22a9e47045c6d6646b5c78e7f5676
SHA512

acb36c3d3dd6b1b3905e4b1c2bf4ce34ef76b60b890d4ce74deabcf6bfa71eb9557dc5bd41585882bf3c14f44c56575708b485559827615fd22ecc72db3d1e35
SSDEEP

1536:tuzIzaI4YrJ6vUxA1uAC18yHio/1D/Qml5OjmU717jMUE4mI:gvUxA1uAC1lH1D55ImU5j

Score

10^/10

a310logger spyware stealer

Malware Config

Signatures

A310logger
A310 Logger is a .NET stealer/logger targeting passwords from browsers and email clients.
stealer spyware a310logger

A310logger Executable 1 IoCs

resource	yara_rule
behavioral2/memory/2084-0-0x00000000006A0000-0x00000000006BA000-memory.dmp	a310logger

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

C:\Users\Admin\AppData\Local\Temp\29c14db2b9dab16788707bca13341a48.exe
"C:\Users\Admin\AppData\Local\Temp\29c14db2b9dab16788707bca13341a48.exe"
1⤵
PID:2084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2084-0-0x00000000006A0000-0x00000000006BA000-memory.dmp

Filesize
104KB

Download
memory/2084-1-0x00007FFCC8750000-0x00007FFCC9211000-memory.dmp

Filesize
10.8MB

Download
memory/2084-5-0x00007FFCC8750000-0x00007FFCC9211000-memory.dmp

Filesize
10.8MB

Download