Extracted

Extracted

• • Target

    5b728c7eb4f832ebbecb2918602fda0f

  • Size

    2.9MB

  • MD5

    5b728c7eb4f832ebbecb2918602fda0f

  • SHA1

    7c3318b75fbaa67237928b43a39ddccaae58a1ba

  • SHA256

    54e3e47bef3d3ea8b87bc2a7af7e8719767fe6afd7abfae102545278526c5347

  • SHA512

    f9b54f5ec15dd3a6d201af5331083e96d77a6b3ff19b5be61d19c3453be7d7869c096ac77be2dbe6948e9b86ad001b85918816bcba2cc7881f2c0249dbaa8a56

  • SSDEEP

    49152:F5Q+tEIjskUnk1rbDuFgVjasp20FFviVdFR8Gmfr/eKXabbFwQHu06p15k:FG+tEaskUnLGVjbp1Duj/mfjeJnSiK4

  Score

  10^/10

  pandastealerevasionspywarestealerthemidatrojan

  • Panda Stealer payload

  • PandaStealer

    Panda Stealer is a fork of CollectorProject Stealer written in C++.

    stealerpandastealer

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2