General

  • Target

    build.bin.zip

  • Size

    366KB

  • Sample

    220524-fcfsqsfed5

  • MD5

    72f09125e6f6a54680c3e3b7e08972de

  • SHA1

    1e2fef3355554f63db0e8f38a41efcd0c72ddea9

  • SHA256

    d5efb272f04436e0a6d84b5b606acb92d48a6035d23d1790ac8ca22b05b547f3

  • SHA512

    60f50658dd1dc3b784c062fd8cfe866dcc094c9634b22d02ea91ec74f1f02634230879512aefdb1165deeaa5aebd7f29c68a1928eb5e0a3f6e1d5ab289e5d237

Malware Config

Targets

    • Target

      build.bin

    • Size

      681KB

    • MD5

      9a0a63a095f6f1c0d1758ffb444bf34d

    • SHA1

      7585f4e86c0fdad234a3c761c6a5928bdfa60e7b

    • SHA256

      fbe66fb14ec3eaf42f84f733f0def6558fe26e24ca9daf012ff57a16662bb46d

    • SHA512

      b47dfd9edf9a1abf036029583d2e4562e2e3d1c2bd39a660fbbd43c9d0d60f183c23359deb0b89585e80ee7b9aa34885aa7d2f83402721fcc99632c5eda3f6c7

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • suricata: ET MALWARE Win32/CollectorStealer CnC Exfil M3

      suricata: ET MALWARE Win32/CollectorStealer CnC Exfil M3

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Tasks