MassLogger

Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

MassLogger Main payload

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

Credentials from Password Stores: Credentials from Web Browsers

Malicious Access or copy of Web Browser Credential store.

Blocklisted process makes network request