Overview

overview

10

Static

static

fc61986772...bb.exe

windows7_x64

10

fc61986772...bb.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc61986772d4dd592c2a603e5f083ef335acc93f9bc25f6598770f793292cfbb

  • Size

    759KB

  • Sample

    220326-wec3macabp

  • MD5

    b346ce18905c9a802993fe0db1350fbf

  • SHA1

    46b576cc28342e895f3f2422ef2e3cc0d08c1f23

  • SHA256

    fc61986772d4dd592c2a603e5f083ef335acc93f9bc25f6598770f793292cfbb

  • SHA512

    cf508a3739e2a71d256a05c0a4edd41248a02f46cf7f61e2cac1ee706090f8576610bee237f6713f47f9283c364c9e7e8b46f914e7a8768c65e4108e886a4b91

Score
10/10
pandastealerspywarestealer

Malware Config

Targets

    • Target

      fc61986772d4dd592c2a603e5f083ef335acc93f9bc25f6598770f793292cfbb

    • Size

      759KB

    • MD5

      b346ce18905c9a802993fe0db1350fbf

    • SHA1

      46b576cc28342e895f3f2422ef2e3cc0d08c1f23

    • SHA256

      fc61986772d4dd592c2a603e5f083ef335acc93f9bc25f6598770f793292cfbb

    • SHA512

      cf508a3739e2a71d256a05c0a4edd41248a02f46cf7f61e2cac1ee706090f8576610bee237f6713f47f9283c364c9e7e8b46f914e7a8768c65e4108e886a4b91

    Score
    10/10
    pandastealerspywarestealer

    • Panda Stealer Payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks