Overview

overview

10

Static

static

10

f7568b8762...87.exe

windows7_x64

10

f7568b8762...87.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087

  • Size

    681KB

  • Sample

    220328-zvczcabbgm

  • MD5

    dd1dfb2adfb2c1d72938fa717f8c3b33

  • SHA1

    d9b5cebd98b53554c3ffe6709d837cfd1e2ba0d5

  • SHA256

    f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087

  • SHA512

    2617040663ab8ad9c17d31ac4787edbff2be4f0cf36f104f1a5806f0a5f66c9fdb9947111efa559f20cc3003094c9b3283ef633cbd1a6496c1a37a356d2a52b3

Score
10/10
pandastealerspywarestealer

Malware Config

Targets

    • Target

      f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087

    • Size

      681KB

    • MD5

      dd1dfb2adfb2c1d72938fa717f8c3b33

    • SHA1

      d9b5cebd98b53554c3ffe6709d837cfd1e2ba0d5

    • SHA256

      f7568b876220f09e36a56846ceb13604f98bcc1b6ba22201fb708c07cd071087

    • SHA512

      2617040663ab8ad9c17d31ac4787edbff2be4f0cf36f104f1a5806f0a5f66c9fdb9947111efa559f20cc3003094c9b3283ef633cbd1a6496c1a37a356d2a52b3

    Score
    10/10
    pandastealerspywarestealer

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks