Overview

overview

10

Static

static

3

73c81dd677...18.exe

windows7-x64

10

73c81dd677...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73c81dd67773b2efa5261e20adf74a5b_JaffaCakes118

  • Size

    992KB

  • Sample

    240526-az7l3sgd21

  • MD5

    73c81dd67773b2efa5261e20adf74a5b

  • SHA1

    fde0db688d6abb4aad0bb646db9f1c192d980b5a

  • SHA256

    ad32cadc3a75e969c0e8c25dfec398378aceb406017050763ce3c5d482998f42

  • SHA512

    8b2483b0dedf9d6b9329202d40544291b55601518c3b14f5df764e277114ee6538bdf6d08efcb8c3dad99ac7368471354acb1bf1ecd3f7da2c072f8c5a8e24d9

  • SSDEEP

    24576:8I3j32qQLhX/CUoDnbUVo2yhVx/NOMCh/zduiMxVRPXQJA:j6DhaJAMx/NOMChxp8PXg

Score
10/10
massloggerevasionspywarestealer

Malware Config

Targets

    • Target

      73c81dd67773b2efa5261e20adf74a5b_JaffaCakes118

    • Size

      992KB

    • MD5

      73c81dd67773b2efa5261e20adf74a5b

    • SHA1

      fde0db688d6abb4aad0bb646db9f1c192d980b5a

    • SHA256

      ad32cadc3a75e969c0e8c25dfec398378aceb406017050763ce3c5d482998f42

    • SHA512

      8b2483b0dedf9d6b9329202d40544291b55601518c3b14f5df764e277114ee6538bdf6d08efcb8c3dad99ac7368471354acb1bf1ecd3f7da2c072f8c5a8e24d9

    • SSDEEP

      24576:8I3j32qQLhX/CUoDnbUVo2yhVx/NOMCh/zduiMxVRPXQJA:j6DhaJAMx/NOMChxp8PXg

    Score
    10/10
    massloggerevasionspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main payload

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Deletes itself

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks