Overview

overview

10

Static

static

1

cee69c3ff3...f0.exe

windows7-x64

10

cee69c3ff3...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cee69c3ff3b220085300c521b466dff0

  • Size

    820KB

  • Sample

    240316-ye8kmsaf2w

  • MD5

    cee69c3ff3b220085300c521b466dff0

  • SHA1

    9e7380e3b8a303220431cbb94df43176d3ad7dd0

  • SHA256

    8ce12f5cdcba1d7ae07442bd0ccd77590037dca26eb7db1d08b7a4608b832586

  • SHA512

    9c11cb65c03c275f15a2614d271c3f4220de8c4a4b7df9990b7922bcfe6c98af59653f489542a83783fe6d65e44a2c8172c0fbcaa1884d81c73079a4cedd3200

  • SSDEEP

    12288:1U+kd3PrGG9CdDrV4+JEDW5z0u4BowvLC6UpL6aQHYUyWtnV:kiG9CdDrVzf4JBPCThQ4UyWtnV

Score
10/10
pandastealershurkinfostealerspywarestealer

Malware Config

Targets

    • Target

      cee69c3ff3b220085300c521b466dff0

    • Size

      820KB

    • MD5

      cee69c3ff3b220085300c521b466dff0

    • SHA1

      9e7380e3b8a303220431cbb94df43176d3ad7dd0

    • SHA256

      8ce12f5cdcba1d7ae07442bd0ccd77590037dca26eb7db1d08b7a4608b832586

    • SHA512

      9c11cb65c03c275f15a2614d271c3f4220de8c4a4b7df9990b7922bcfe6c98af59653f489542a83783fe6d65e44a2c8172c0fbcaa1884d81c73079a4cedd3200

    • SSDEEP

      12288:1U+kd3PrGG9CdDrV4+JEDW5z0u4BowvLC6UpL6aQHYUyWtnV:kiG9CdDrVzf4JBPCThQ4UyWtnV

    Score
    10/10
    pandastealershurkinfostealerspywarestealer

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks