Overview

overview

10

Static

static

10

7eb3edb335...a5.exe

windows10-2004-x64

10

7eb3edb335...a5.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    7eb3edb3351b678778084ab5d2a08ef40b6b518f25b497d1cf97563cf8ebeda5.exe
  • Size 8KB
  • Sample250707-r7aqrawvcs
  • SHA256 7eb3edb3351b678778084ab5d2a08ef40b6b518f25b497d1cf97563cf8ebeda5
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
massloggerpurecryptercollectiondiscoverydownloaderloaderspywarestealer

Malware Config

Extracted

Family

  • purecrypter

C2

  • http://example.com/api/test

Extracted

Family

  • masslogger

Attributes
  • exfiltration_mode

    #SMTPEnabled

  • expire_time_date

    2025-02-18

  • host_password

    london@1759

  • host_port

    587

  • host_receiver

    [email protected]

  • host_sender

    [email protected]

  • host_server

    mail.xma0.com

  • ssl_slate

    True

Targets

    • Target
      7eb3edb3351b678778084ab5d2a08ef40b6b518f25b497d1cf97563cf8ebeda5.exe
    • Size 8KB
    • SHA256 7eb3edb3351b678778084ab5d2a08ef40b6b518f25b497d1cf97563cf8ebeda5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    massloggerpurecryptercollectiondiscoverydownloaderloaderspywarestealer

    • MassLogger

      Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

      stealerspywaremasslogger

    • Masslogger family

      masslogger

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

      loaderdownloaderpurecrypter

    • Purecrypter family

      purecrypter

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Accesses Microsoft Outlook profiles

      collection

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks