Overview

overview

10

Static

static

8

50c1e8df73...76.exe

windows7-x64

10

50c1e8df73...76.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50c1e8df73c95943551d862ac8e58ff6a064a3b17cbc841d97589cb1a2e51376

  • Size

    5.7MB

  • Sample

    230129-sqm57ade6t

  • MD5

    b318c432e7e6baab2d606df72aed7eff

  • SHA1

    4fa94dc9e67d7d27097b4f1699a65767f728eb8d

  • SHA256

    50c1e8df73c95943551d862ac8e58ff6a064a3b17cbc841d97589cb1a2e51376

  • SHA512

    190fad1ac03fff9b5e3270c1442900b43bc2a95ddc34b3969bf82dbb2f63f0f1eced2126d0f3947128fb504154982f48acf2c16e09312c5a3bc6b2cc16f6e5b0

  • SSDEEP

    98304:gi3r5p6X9ns1Os7qxPniZb7Ieiqs9DCRKOypL7SxMeSiyDM/qW:h3ruy/W5niuei/9DCRKOOuxMx+q

Score
10/10
pandastealerspywarestealervmprotect

Malware Config

Targets

    • Target

      50c1e8df73c95943551d862ac8e58ff6a064a3b17cbc841d97589cb1a2e51376

    • Size

      5.7MB

    • MD5

      b318c432e7e6baab2d606df72aed7eff

    • SHA1

      4fa94dc9e67d7d27097b4f1699a65767f728eb8d

    • SHA256

      50c1e8df73c95943551d862ac8e58ff6a064a3b17cbc841d97589cb1a2e51376

    • SHA512

      190fad1ac03fff9b5e3270c1442900b43bc2a95ddc34b3969bf82dbb2f63f0f1eced2126d0f3947128fb504154982f48acf2c16e09312c5a3bc6b2cc16f6e5b0

    • SSDEEP

      98304:gi3r5p6X9ns1Os7qxPniZb7Ieiqs9DCRKOypL7SxMeSiyDM/qW:h3ruy/W5niuei/9DCRKOOuxMx+q

    Score
    10/10
    pandastealerspywarestealervmprotect

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks