Extracted

• • Target
    Ike.exe
  • Size 978KB
  • SHA256 a2b0e9c1ea03a3a538fe9ef7f8e6dbf4c08feba8560e238e29fce0dd2f2e144b
  • MD5 4c1a1e456b88880376ebc5656f631da5
  • SHA1 a9940da02618ad739ddecd032355b94f30ffcdfe
  • SHA512 3e3c406c3dbd52cebfb706615118deeacf67c464b65e510fbf518750f6e8a24486ef5b0f94639b3398015c53f8f4ee84d7e605b7a4b978d911a1e9bbe9d33c13
  • MD5 SHA1 SHA512

  Score

  10^/10

  upxstealerspywaremasslogger

  • MassLogger

    Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    stealerspywaremasslogger

  • MassLogger Main Payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Drops startup file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2