Overview

overview

10

Static

static

10

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    673KB

  • Sample

    230426-abftfsdg97

  • MD5

    6cfcbdf4670f3ae5abd5942a36dd5a95

  • SHA1

    4dcf567d82a02957e2e2c3160c2f7e23ef2f1247

  • SHA256

    5bfd7eae5ad25befd314c183473eeaca4e87e3e2aefda5e34649e202b81a6f48

  • SHA512

    4d61f08109ade0bd2fb5c283d6a41183e5a49982c225c94bd821fdd82c234c1fbc8e7da7136e2fc39c6eb99f4a558fdb930074bf8642c51782de4c0c97921090

  • SSDEEP

    12288:VoJqNIPtNmO6IOOEp0TMlja7NRl2PSVikIyoyueh+AkHcnLwuukoCOD6zlgjOz+i:VoJEKZ6IEGTMxapRl2PSwHTehy6BP+pQ

Score
10/10
pandastealerspywarestealer

Malware Config

Extracted

Family

pandastealer

Version

1.11

C2

http://thisisgenk.temp.swtest.ru

Targets

    • Target

      file.exe

    • Size

      673KB

    • MD5

      6cfcbdf4670f3ae5abd5942a36dd5a95

    • SHA1

      4dcf567d82a02957e2e2c3160c2f7e23ef2f1247

    • SHA256

      5bfd7eae5ad25befd314c183473eeaca4e87e3e2aefda5e34649e202b81a6f48

    • SHA512

      4d61f08109ade0bd2fb5c283d6a41183e5a49982c225c94bd821fdd82c234c1fbc8e7da7136e2fc39c6eb99f4a558fdb930074bf8642c51782de4c0c97921090

    • SSDEEP

      12288:VoJqNIPtNmO6IOOEp0TMlja7NRl2PSVikIyoyueh+AkHcnLwuukoCOD6zlgjOz+i:VoJEKZ6IEGTMxapRl2PSwHTehy6BP+pQ

    Score
    10/10
    pandastealerspywarestealer

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks