Overview

overview

10

Static

static

3

93691c5a44...18.exe

windows7-x64

10

93691c5a44...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93691c5a4445ff293229299f17d4c1f9_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240604-c5cp1aae8w

  • MD5

    93691c5a4445ff293229299f17d4c1f9

  • SHA1

    d35793248343061d6b01718838de0023e8b20295

  • SHA256

    f487db26e46dc5067bca06003759d119dae50ff6c527a8c68fc01d73f41f4a64

  • SHA512

    a6bfd4e26771ad0e38ff20052cf9f3535185e4ec60d162a3c143f178ae679b55ff4d93b82a2b8e3a01937db4243af235d142ba9465288e34a79efc15b047b1e9

  • SSDEEP

    24576:UL+Mb7hUhZqc0jcZMrmQQDWBmbcLe3Pz3BUxPk+prSDVxHgVwX:UfWh10QZSIW0bcqjW+oSDVxHKU

Score
10/10
massloggerspywarestealerupx

Malware Config

Targets

    • Target

      93691c5a4445ff293229299f17d4c1f9_JaffaCakes118

    • Size

      1.2MB

    • MD5

      93691c5a4445ff293229299f17d4c1f9

    • SHA1

      d35793248343061d6b01718838de0023e8b20295

    • SHA256

      f487db26e46dc5067bca06003759d119dae50ff6c527a8c68fc01d73f41f4a64

    • SHA512

      a6bfd4e26771ad0e38ff20052cf9f3535185e4ec60d162a3c143f178ae679b55ff4d93b82a2b8e3a01937db4243af235d142ba9465288e34a79efc15b047b1e9

    • SSDEEP

      24576:UL+Mb7hUhZqc0jcZMrmQQDWBmbcLe3Pz3BUxPk+prSDVxHgVwX:UfWh10QZSIW0bcqjW+oSDVxHKU

    Score
    10/10
    massloggerspywarestealerupx

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • MassLogger Main payload

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks