General

  • Target

    https://anonfiles.com/r7f7r6A8y5/crack_me_rar

  • Sample

    221007-sg6aeacgb8

Malware Config

Extracted

Family

pandastealer

Version

1.11

C2

http://a.de

Targets

    • Target

      https://anonfiles.com/r7f7r6A8y5/crack_me_rar

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Tasks