pandastealer | f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087 | Triage

Sharing

General

Target

f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087
Size

681KB
Sample

220328-zvczcabbgm
MD5

dd1dfb2adfb2c1d72938fa717f8c3b33
SHA1

d9b5cebd98b53554c3ffe6709d837cfd1e2ba0d5
SHA256

f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087
SHA512

2617040663ab8ad9c17d31ac4787edbff2be4f0cf36f104f1a5806f0a5f66c9fdb9947111efa559f20cc3003094c9b3283ef633cbd1a6496c1a37a356d2a52b3

Score

10^/10

pandastealer spyware stealer

Malware Config

Targets

- Target
  
  f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087
- Size
  
  681KB
- MD5
  
  dd1dfb2adfb2c1d72938fa717f8c3b33
- SHA1
  
  d9b5cebd98b53554c3ffe6709d837cfd1e2ba0d5
- SHA256
  
  f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087
- SHA512
  
  2617040663ab8ad9c17d31ac4787edbff2be4f0cf36f104f1a5806f0a5f66c9fdb9947111efa559f20cc3003094c9b3283ef633cbd1a6496c1a37a356d2a52b3
Score

10^/10

pandastealer spyware stealer
- PandaStealer
  Panda Stealer is a fork of CollectorProject Stealer written in C++.
  stealer pandastealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

pandastealerspywarestealer

behavioral2

pandastealerspywarestealer