pandastealer | 431fd6d04bb3e1c1dfb5ffc096246c3321fd467a110433640823f9ea5c90751d | Triage

Sharing

General

Target

740554cb974f32f7542251b70cbafb6a.exe
Size

681KB
Sample

221107-vfn1vaggf2
MD5

740554cb974f32f7542251b70cbafb6a
SHA1

15b5556c763412afbd882a2876fb85bad7a4d55c
SHA256

431fd6d04bb3e1c1dfb5ffc096246c3321fd467a110433640823f9ea5c90751d
SHA512

3eb17f1158023a7478c7a526c17a90f0bd34ff60d31e87d9c19cde7225b8549d4665eb9c8e2f992b29aa4803c646fb19d04fe54204e116463cf8d5ef8f3efc76
SSDEEP

12288:VoJqNIPtNmO6IOOEp0TMlja7NRl2PSVikIyoyueh+AkHcnLwuukoCOD6zlWjOz+2:VoJEKZ6IEGTMxapRl2PSwHTehy6BN+p4

Score

10^/10

pandastealer spyware stealer

Malware Config

Extracted

Family

pandastealer

Version

1.11

C2

http://crimestreetsru.ru.xsph.ru

Targets

- Target
  
  740554cb974f32f7542251b70cbafb6a.exe
- Size
  
  681KB
- MD5
  
  740554cb974f32f7542251b70cbafb6a
- SHA1
  
  15b5556c763412afbd882a2876fb85bad7a4d55c
- SHA256
  
  431fd6d04bb3e1c1dfb5ffc096246c3321fd467a110433640823f9ea5c90751d
- SHA512
  
  3eb17f1158023a7478c7a526c17a90f0bd34ff60d31e87d9c19cde7225b8549d4665eb9c8e2f992b29aa4803c646fb19d04fe54204e116463cf8d5ef8f3efc76
- SSDEEP
  
  12288:VoJqNIPtNmO6IOOEp0TMlja7NRl2PSVikIyoyueh+AkHcnLwuukoCOD6zlWjOz+2:VoJEKZ6IEGTMxapRl2PSwHTehy6BN+p4
Score

10^/10

pandastealer spyware stealer
- PandaStealer
  Panda Stealer is a fork of CollectorProject Stealer written in C++.
  stealer pandastealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

pandastealerspywarestealer

behavioral2

pandastealerspywarestealer