Netskope Threat Labs

MassLogger

ATP Sandbox Adv. HeuristicsAV

MassLogger is a .NET credential stealer whose staged design starts with a launcher using simple anti-debugging techniques, which XOR-decrypts a second stage assembly that then loads and executes the final payload.

First seen
May 2022
Last seen
October 2026
Masslogger
Alert Name
ByteCode-MSIL.Infostealer.MassLogger
ByteCode-MSIL.Spyware.Masslogger
ByteCode-MSIL.Trojan.Masslogger
ByteCode-MSIL.Trojan.MassLogger
Email-MIME.Trojan.MassLogger
Email-MSG.Trojan.MassLogger
Gen:Variant.MassLogger.1
Script-JS.Trojan.MassLogger
Script-PowerShell.Trojan.MassLogger
Script-WScript.Trojan.Masslogger