Resubmissions

11/12/2025, 15:53

251211-tb3g1avkgy7

19/07/2020, 19:47

200719-tkw21mp6gs8

General

  • Target
    pandabanker_2.6.5.vir
  • Size 189KB
  • Sample200719-tkw21mp6gs
  • SHA256 5782c7ade207fd4415c35bd1e98bad7c3fcaef206fa60f142b8d1062e7103670
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      pandabanker_2.6.5.vir
    • Size 189KB
    • SHA256 5782c7ade207fd4415c35bd1e98bad7c3fcaef206fa60f142b8d1062e7103670
    • MD5 SHA1 SHA512
    • Executes dropped EXE

    • Deletes itself

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks