Resubmissions

11/12/2025, 06:55

251211-hpy6ysbk9v7

19/07/2020, 19:30

200719-7smedd1abj8

General

  • Target
    pandabanker_2.5.1.vir
  • Size 98KB
  • Sample200719-7smedd1abj
  • SHA256 31ed064712da1c70c11c2e157e8469812befb3f051dcd7ffa4de44be49860381
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      pandabanker_2.5.1.vir
    • Size 98KB
    • SHA256 31ed064712da1c70c11c2e157e8469812befb3f051dcd7ffa4de44be49860381
    • MD5 SHA1 SHA512
    • Executes dropped EXE

    • Deletes itself

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks