General

  • Target

    210624-qbwcpjfqhx_pw_infected.zip

  • Size

    416KB

  • MD5

    0b09f0860395935fb8d78653c70722a8

  • SHA1

    8a573e49063058c44daa77119d9b61e3a6105d35

  • SHA256

    5dcdcee4ad221f5a09120fb60440afc54c3d6a2e62c9bd3ff76cf577e7031711

  • SHA512

    138eef315068119398c5cf41c66dd85cc92f7a1983b9df7729d4d3ccc4d6f11d6053fa97a5018cf1b876cc6528553c48c9eabf7132b77ccdd2e6fdc40b9fa80a

  • SSDEEP

    12288:T/n9GGshsPSYIVqdU4ZK8goFCJpIiFv+RZYr85:Dnh4QSYI6Ur8goFCJyler85

Score
10/10

Malware Config

Signatures

  • Panda Stealer payload 1 IoCs
  • Pandastealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 210624-qbwcpjfqhx_pw_infected.zip
    .zip .ps1 polyglot

    Password: infected

  • ForceNitro.exe
    .exe windows:6 windows x86 arch:x86

    51ff75d6d097884e3e24394f5a7d0c8f


    Headers

    Imports

    Sections