Overview

overview

10

Static

static

3

Photo route.exe

windows7-x64

10

Photo route.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Photo route.zip

  • Size

    1.4MB

  • Sample

    230508-pt73zscd6t

  • MD5

    e31e933711059c72fbaf2b3b0397a007

  • SHA1

    30022d8c83cb00ae6a282a014c431862e4f3001d

  • SHA256

    453439bd8846f46fb97b11c9274739b90e8417e2d4d64b394e435160257ebf0d

  • SHA512

    7b64bef3113f63240ae46f2e97ff71ce1929887c2532834cb5d2ac9efe69feda626203c40c5867a287c5de0004f44f732abd31c19cb9002c8f5adb0b7f280f91

  • SSDEEP

    24576:k6VvAjUM1V/sIPgl4DFzBz9nvJqkFEunFhY0PywgYPBYhVrqtKA4Cg0ryE4:kcvK57yuhnxqoEug0PyXYPShVWBmE4

Score
10/10
pandastealerstealer

Malware Config

Targets

    • Target

      Photo route.exe

    • Size

      1.6MB

    • MD5

      ca6e7bc100769e0b2c57226254963480

    • SHA1

      6a49e68fe527ea932bdf0cfb44d05dce505e57ad

    • SHA256

      c595e256f31458c264160ac18e45e87d666b07f372b4559882be138cb2438e77

    • SHA512

      4691ff07af4158000da6d24ac7018ece1f5c35609a20678ff57048a34b2d71ad5a1bdaec3898164ae9d31d81bbfe8e4f943f97b65ba78bdd2df4f2f48658d9fa

    • SSDEEP

      24576:GnifyThjAjUO1V/sIPgF6DFvBzDnvJCkF8AnFhYWA:UifyThjKt7yUhtxCo8AgWA

    Score
    10/10
    pandastealerstealer

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks