Overview

overview

10

Static

static

10

72a36bdacd...57.exe

windows7_x64

10

72a36bdacd...57.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72a36bdacd23ed0ba60f6594d83350d08fafb351e2224a11e463c8d518137c57

  • Size

    681KB

  • Sample

    220623-cxq8esbddn

  • MD5

    a8a48c0921e289bbc6b21551a819d724

  • SHA1

    c0c4708c566a52e1e218f3e8fb661067ac76f663

  • SHA256

    72a36bdacd23ed0ba60f6594d83350d08fafb351e2224a11e463c8d518137c57

  • SHA512

    b291049a5224f68c743f09579ba5fe673e0c0af606df748b78d508a09c62bed4a67772c9b86270251bc0c42fe5b57d5ebad469996b827dc130cf32b1da0eec63

Score
10/10
pandastealerspywarestealersuricata

Malware Config

Extracted

Family

pandastealer

Version

1.11

C2

http://a0688629.xsph.ru

Targets

    • Target

      72a36bdacd23ed0ba60f6594d83350d08fafb351e2224a11e463c8d518137c57

    • Size

      681KB

    • MD5

      a8a48c0921e289bbc6b21551a819d724

    • SHA1

      c0c4708c566a52e1e218f3e8fb661067ac76f663

    • SHA256

      72a36bdacd23ed0ba60f6594d83350d08fafb351e2224a11e463c8d518137c57

    • SHA512

      b291049a5224f68c743f09579ba5fe673e0c0af606df748b78d508a09c62bed4a67772c9b86270251bc0c42fe5b57d5ebad469996b827dc130cf32b1da0eec63

    Score
    10/10
    pandastealerspywarestealersuricata

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • suricata: ET MALWARE Win32/CollectorStealer CnC Exfil M3

      suricata: ET MALWARE Win32/CollectorStealer CnC Exfil M3

      suricata

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks