Overview

overview

10

Static

static

Order_015_pdf.exe

windows7_x64

10

Order_015_pdf.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    891c9afdcd1f9e944149d7839f1dca9b720b72b795c6b6fd6e93cef9dcfbc02d

  • Size

    1.0MB

  • Sample

    220206-zepcfabhcj

  • MD5

    f884b38a406ad29d5debd15386849d19

  • SHA1

    b8463f8c8fb4f2656086e13e2101d335f0d224e5

  • SHA256

    891c9afdcd1f9e944149d7839f1dca9b720b72b795c6b6fd6e93cef9dcfbc02d

  • SHA512

    2b18d754b403c049404b5cc12560078100e4b97979760f59258e833b74847ad55faf9937bc009165e91dc3ba3ac728e1d357c8932a85c4c121cb956bbf2ed8d7

Score
10/10
pandastealerstealer

Malware Config

Targets

    • Target

      Order_015_pdf.exe

    • Size

      1.2MB

    • MD5

      b21f6724198f32941b6dec8e63a3acd2

    • SHA1

      97decceedc4e24d03c45cadafb88940695ccfcae

    • SHA256

      5619c8395d506c05cebd14d6145c87a87e52b265a2442aa6dbea431f94c22eef

    • SHA512

      4bed4531a9af42611baa88be4ff3229d4040b678c4b87741d09f737ae6d25960581c0df60e380622a15280fc915e0ce51942cb665894a999603e76b1ad93a5dc

    Score
    10/10
    pandastealerstealer

    • Panda Stealer Payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks