Skip to content

Malware

MASS Logger

MassLogger is a .NET credential stealer. It starts with a launcher that uses simple anti-debugging techniques which can be easily bypassed when identified.

MASS Logger is a Windows malware family.

Background

MassLogger is a credential stealer built on .NET. Execution begins with a launcher employing basic anti-debugging tricks that are trivial to defeat once spotted. This initial loader ultimately XOR-decrypts a second-stage assembly, which in turn decrypts, loads and runs the final MassLogger payload.


Source: Malpedia (Fraunhofer FKIE).