General

  • Target

    f0dc61d1e7bcdb7bb9d521538db9f4380ebb382f8dec8629433b3181c8b42b8a

  • Size

    1.2MB

  • Sample

    220110-aa38csdge2

  • MD5

    7253e37821a58f94999228a8d8655e9c

  • SHA1

    3a5d828823e6c05e996e0227a97d85a63edc4ad1

  • SHA256

    f0dc61d1e7bcdb7bb9d521538db9f4380ebb382f8dec8629433b3181c8b42b8a

  • SHA512

    f0053ea7526d37e5d6c0bdb8d945e984278a4ca67ab19f50efb90203c86337f18188786ada105cb214346d6fd7cc99c0d0ac3776e2e18acd105591d50f99a217

Malware Config

Targets

    • Target

      f0dc61d1e7bcdb7bb9d521538db9f4380ebb382f8dec8629433b3181c8b42b8a

    • Size

      1.2MB

    • MD5

      7253e37821a58f94999228a8d8655e9c

    • SHA1

      3a5d828823e6c05e996e0227a97d85a63edc4ad1

    • SHA256

      f0dc61d1e7bcdb7bb9d521538db9f4380ebb382f8dec8629433b3181c8b42b8a

    • SHA512

      f0053ea7526d37e5d6c0bdb8d945e984278a4ca67ab19f50efb90203c86337f18188786ada105cb214346d6fd7cc99c0d0ac3776e2e18acd105591d50f99a217

    • Panda Stealer Payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks