General

  • Target

    57061804ee3f62601d4147b0e0953ab4

  • Size

    681KB

  • Sample

    240112-vmkxrscbdn

  • MD5

    57061804ee3f62601d4147b0e0953ab4

  • SHA1

    d3ca90ea276a8fffe5e46b6c79f4193d7c84d9cc

  • SHA256

    ebff40457d5e51cfe5b3cbe132131ec6a7f44daeac67ead885e1498bf2275979

  • SHA512

    30af8c0f18235340c4c571cb06238c52b332d293d1151e6913bf9c426b2a9fa72dbba89bcc6c20099946fe2fb15f1722d00c2229fbf2ea42f7a0c70da69e5662

  • SSDEEP

    12288:VoJqNIPtNmO6IOOEp0TMlja7NRl2PSVikIyoyueh+AkHcnLwuukoCOD6zlijOz+2:VoJEKZ6IEGTMxapRl2PSwHTehy6Bp+p4

Malware Config

Extracted

Family

pandastealer

Version

1.11

C2

http://f0568876.xsph.ru

Targets

    • Target

      57061804ee3f62601d4147b0e0953ab4

    • Size

      681KB

    • MD5

      57061804ee3f62601d4147b0e0953ab4

    • SHA1

      d3ca90ea276a8fffe5e46b6c79f4193d7c84d9cc

    • SHA256

      ebff40457d5e51cfe5b3cbe132131ec6a7f44daeac67ead885e1498bf2275979

    • SHA512

      30af8c0f18235340c4c571cb06238c52b332d293d1151e6913bf9c426b2a9fa72dbba89bcc6c20099946fe2fb15f1722d00c2229fbf2ea42f7a0c70da69e5662

    • SSDEEP

      12288:VoJqNIPtNmO6IOOEp0TMlja7NRl2PSVikIyoyueh+AkHcnLwuukoCOD6zlijOz+2:VoJEKZ6IEGTMxapRl2PSwHTehy6Bp+p4

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks