Extracted

Extracted

• • Target
    STARRETT-NEW-ORDERS-110882-110883-110884-110885-110886-110887.js
  • Size 7.4MB
  • SHA256 8ace4a55f135b16d1ea4149f9fef5af540e78249139a28db4645802687280fe2
  • MD5 87a9da00b5acdcb7e4f9399b931da372
  • SHA1 be54f599fe7cadb2e3c384d7ae408e2a07bb15df
  • SHA512 c03e9249155515504f90958f098654bb6e5a49ab424c759d4f70b9ebca99ad6bdbee293553faab03ea515ca3b8845cc48576f322759116341ec9e2d62e66f4e2
  • SSDEEP 49152:bjos8vrY5p9tPDB9NssMcsmYtUmDqqZvP0S02l3WZIJx02iq5IVP2/otTiPiyiS9:bLRBsCbZEB2INR
  • TLSH
    T191765B62B2C071AB28D40FDCB25587F07E4F1280AEF4C913697E9D8D4FD7416A5293AE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectionexecutionmassloggerpersistencespywarestealer

  • Family: MassLogger

    Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    stealerspywaremasslogger

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Registers new Windows logon scripts automatically executed at logon.

    persistence

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2