General

  • Target

    Service64.exe

  • Size

    2.9MB

  • Sample

    230810-kl1aysdb51

  • MD5

    5c2e76ac6e9d7b9a3f0c9c211a721bbb

  • SHA1

    d85d4b80dd7ea8e65819cdaf74c0876ed48cd070

  • SHA256

    b71283111aeb6aa2ac4412a61fa71ad3111f4bb961ad2586a60b4b993c2522f3

  • SHA512

    de443b489dd8d540db8999de984f4e99841828886f7dc7eb25de7a1d006dcc9f8044a86220cb2ab22fba30a66b364068a565db1973da7ff2fafaac7fb1261568

  • SSDEEP

    24576:OSEgfyjmEpIXgxhn+kwnnIl6a9DhvhJhckmZeVCiN1cR45XxhE58tiqxj4lYBk2:OZmEpIXgz+il6a3vkYVxl5Ta8X4KB

Score
10/10

Malware Config

Targets

    • Target

      Service64.exe

    • Size

      2.9MB

    • MD5

      5c2e76ac6e9d7b9a3f0c9c211a721bbb

    • SHA1

      d85d4b80dd7ea8e65819cdaf74c0876ed48cd070

    • SHA256

      b71283111aeb6aa2ac4412a61fa71ad3111f4bb961ad2586a60b4b993c2522f3

    • SHA512

      de443b489dd8d540db8999de984f4e99841828886f7dc7eb25de7a1d006dcc9f8044a86220cb2ab22fba30a66b364068a565db1973da7ff2fafaac7fb1261568

    • SSDEEP

      24576:OSEgfyjmEpIXgxhn+kwnnIl6a9DhvhJhckmZeVCiN1cR45XxhE58tiqxj4lYBk2:OZmEpIXgz+il6a3vkYVxl5Ta8X4KB

    Score
    10/10
    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks