General

  • Target

    Skinchanger.exe

  • Size

    7.0MB

  • Sample

    210719-2qhftjrap6

  • MD5

    3ec2afd717e1874cd5b5beffee26fa03

  • SHA1

    89172e4caa7a368c525ffc70868d07ea4b963b4b

  • SHA256

    5a819f7cddb64f6ada6803b0eb5eeab0df6a789583049cbdd11a57b679e99029

  • SHA512

    ab6bb583102f3047f05b0f447f60b7836bdbc84de51efb95503c2069e26d3566aceaa575999123c2603ff22bc439215e7960ecfb7ed955fc40884e1af0e4f8fc

Malware Config

Targets

    • Target

      Skinchanger.exe

    • Size

      7.0MB

    • MD5

      3ec2afd717e1874cd5b5beffee26fa03

    • SHA1

      89172e4caa7a368c525ffc70868d07ea4b963b4b

    • SHA256

      5a819f7cddb64f6ada6803b0eb5eeab0df6a789583049cbdd11a57b679e99029

    • SHA512

      ab6bb583102f3047f05b0f447f60b7836bdbc84de51efb95503c2069e26d3566aceaa575999123c2603ff22bc439215e7960ecfb7ed955fc40884e1af0e4f8fc

    • Panda Stealer Payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks