Overview

overview

10

Static

static

5f6c2b356e...e3.exe

windows7_x64

10

5f6c2b356e...e3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f6c2b356ec142dad0c964aab5527e7f1040554ffcd3f6f143a8e35c31a088e3

  • Size

    799KB

  • Sample

    220417-rqwxnafhdj

  • MD5

    9253c5f51186dc128a7187440cfd2b3f

  • SHA1

    9fc815826ef4a99920b40a504603be1947506cd3

  • SHA256

    5f6c2b356ec142dad0c964aab5527e7f1040554ffcd3f6f143a8e35c31a088e3

  • SHA512

    6a575dd843babdb1690047c5f16593626c6a5dcdbf030aed18798fe60a1e3772349b4a202a89134e7dcc6b39236e19a67fd82a279c9ce8e09f88f090acabc6ba

Score
10/10
pandastealerspywarestealer

Malware Config

Targets

    • Target

      5f6c2b356ec142dad0c964aab5527e7f1040554ffcd3f6f143a8e35c31a088e3

    • Size

      799KB

    • MD5

      9253c5f51186dc128a7187440cfd2b3f

    • SHA1

      9fc815826ef4a99920b40a504603be1947506cd3

    • SHA256

      5f6c2b356ec142dad0c964aab5527e7f1040554ffcd3f6f143a8e35c31a088e3

    • SHA512

      6a575dd843babdb1690047c5f16593626c6a5dcdbf030aed18798fe60a1e3772349b4a202a89134e7dcc6b39236e19a67fd82a279c9ce8e09f88f090acabc6ba

    Score
    10/10
    pandastealerspywarestealer

    • Panda Stealer Payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks